4 ms·
I guess the moral here is to always open your docx/xlsx files using 7zip and checking the raw xml first.
by vxNsr 8y ago
I guess the moral here is to always open your docx/xlsx files using 7zip and checking the raw xml first.
- mappu 8y agoCVE-2018-10115, CVE-2018-5996, CVE-2017-17969, and CVE-2016-2334 in 7-Zip all gave code execution when opening a malformed archive.
- vxNsr 7y agoah... but unless it's a spear-phishing attack they're not gonna guess that I'd first open the archive with 7-zip and thus most likely won't build it with that in mind.