gossitd's comments

gossitd | 10 years ago | on: Microsoft Office – OLE Packager allows code execution in all Office versions

It needs user interaction. POC Samples here: http://owned.lab6.com/~gossi/research/public/packager/ (made by me, safe to try).

gossitd | 10 years ago | on: Microsoft Office – OLE Packager allows code execution in all Office versions

Yeah, this is my mistake when writing the advisory. For info, I did test it (with right extension) and it DOES work at some corps, who turn off signing (I know, I know). Additionally, you can use .js or .vbs to spawn Powershell command line with switch to turn off checking.

gossitd | 10 years ago | on: Microsoft Office – OLE Packager allows code execution in all Office versions

hi, I wrote the advisory. Here's some POC I just published here: http://owned.lab6.com/~gossi/research/public/packager/

The SalesOrder.rtf file is safe to try at work. All it does is lock your workstation. It should work behind Software Restriction Policy and Microsoft AppLocker (and Citrix Application thingy).