Vulnerability
vulnerability:microsoft_office_vulnerability
Also: first vulnerability in Microsoft Office
Vulnerability in an Office product that allowed control of a data pointer and arbitrary code execution; the episode does not provide a CVE identifier.
Vulnerability in an Office product that allowed control of a data pointer and arbitrary code execution; the episode does not provide a CVE identifier.
“we have indeed the first vulnerability in Microsoft Office”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | Microsoft Office 2007 | Explicit | 160 |
| outgoing | AFFECTS | Microsoft Visio | Explicit | 160 |
| incoming | INVOLVES | eEye Office 2007 vulnerability disclosure | Explicit | 160 |
Microsoft Office vulnerability AFFECTS Microsoft Office 2007
The episode identifies the vulnerability Greg ultimately found as the first disclosed vulnerability in Microsoft Office 2007.
Explicit Confidence 95% · Greg Linares EP 160 Details
“we have indeed the first vulnerability in Microsoft Office”
Microsoft Office vulnerability AFFECTS Microsoft Visio
The successful vulnerability was found in Visio, a product inside the Office suite.
Explicit Confidence 99% · Greg Linares EP 160 Details
“it happens to be in Office Visio. It was another product inside the Office suite.”
eEye Office 2007 vulnerability disclosure INVOLVES Microsoft Office vulnerability
The eEye Office 2007 disclosure involved the vulnerability Greg found through fuzzing and subsequent validation without a debugger attached.
Explicit Confidence 98% · Jack Rhysider EP 160 Details
“eEye found another zero-day, this time in the latest Microsoft Office”