OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [HV-HIGH] Microsoft Jet DB engine vulnerabilities

From: Son SonOfLilit (sonoflilitgmail.com)
Date: Mon Apr 04 2005 - 13:23:29 CDT


Or perhaps you have some macros running on every file (WordXP throws
me a warning every time I open a DOC since I installed MathType, which
extends Office through VBA scripts. Guess WordXP has some kind of
".login" / "autoexec.bat" file - a "initialization" script, that
MathType hooks up through... Never bothered to research into it)

(Sorry for the empty mail I mistakenly sent earlier)

On Apr 3, 2005 7:13 PM, Steve Shockley <steve.shockleyshockley.net> wrote:
> Denis Jedig wrote:
> > Newer Access versions throw a security warning if the VBA code is not
> > signed and let the user disable VBA execution. The issue highlighted by
> > hexview is able to circumvent this security-related feature.
>
> Access 2003 on WinXP SP2 throws a security warning when I open any
> Access file, even one without VBA. I believe that's new with WinXP SP2.
>