Incident
incident:eeye_office_2007_vulnerability_disclosure
Research and disclosure episode involving eEye’s initial mistaken report and subsequent discovery of an Office Visio vulnerability.
Research and disclosure episode involving eEye’s initial mistaken report and subsequent discovery of an Office Visio vulnerability.
“The vulnerability goes out. A couple months later it gets disclosed”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | INVOLVES | Microsoft Office vulnerability | Explicit | 160 |
| outgoing | INVOLVES | Microsoft | Explicit | 160 |
eEye Office 2007 vulnerability disclosure INVOLVES Microsoft Office vulnerability
The eEye Office 2007 disclosure involved the vulnerability Greg found through fuzzing and subsequent validation without a debugger attached.
Explicit Confidence 98% · Jack Rhysider EP 160 Details
“eEye found another zero-day, this time in the latest Microsoft Office”
eEye Office 2007 vulnerability disclosure INVOLVES Microsoft
eEye reported the Office vulnerability to Microsoft so it could investigate and patch it before public disclosure.
Explicit Confidence 99% · Greg Linares EP 160 Details
“then we report to Microsoft”