Microsoft Word Protection Bypass

From: Thorsten Delbrouck-Konetzko (Thorsten.Delbrouck_at_guardeonic.com)
Date: 01/02/04

  • Next message: Vietnamese Security Group: "include() vuln in EasyDynamicPages v.2.0" 
    To: bugtraq@securityfocus.com
Date: Fri, 2 Jan 2004 10:51:03 +0000

    Hi all,

    Microsoft Word provides an option to protect "forms" by password. This is
    used to ensure that unauthorized users cannot manipulate the contents of
    documents except within specially designed "form" areas. This feature is
    also often used to protect documents which do not even have form areas
    (quotations/offers etc.).

    This form protection can easily be removed without any additional tools
    (apart from a hex-editor).

    Please find the full advisory attached.

    best regards,
    /tdk 

    -- 
 Thorsten Delbrouck
 Chief Information Officer
 Guardeonic Solutions AG
 Rosenheimer Str. 116
 D-81669 Munich
---------------------------------

  • Next message: Vietnamese Security Group: "include() vuln in EasyDynamicPages v.2.0"

    Relevant Pages

    • Re: C++ sucks for games
      ... > manipulate the object's members. ... > specifiers provide some naive compile-time limits on how instances of ... use - it's *not* intended to "protect" the internals of the class. ...
      (comp.lang.lisp)
    • Re: C++ sucks for games
      ... > manipulate the object's members. ... > specifiers provide some naive compile-time limits on how instances of ... use - it's *not* intended to "protect" the internals of the class. ...
      (comp.lang.cpp)
    • Re: Concurent I/O Index and Data registers access
      ... If a register is accessed from multiple processes you can protect it with a ... Mutex or you can put the code to manipulate it in the OAL and use a Critical ...
      (microsoft.public.windowsce.platbuilder)
    • Re: Column password protection
      ... However you can lock/unlock specific cells, including whole columns, that when the worksheet is protected; they can/cannot be selected and /or edited. ... You can of course hide a column which is very different to the above, if you hide and then protect the sheet you cannot unhide. ... I would like to hide the contents in specific columns from unauthorized users. ...
      (microsoft.public.excel.programming)