Severity: CRITICAL

  DESCRIPTION

An insecure method in the ARDoc ActiveX Control (ARDoc.dll) can be exploited to overwrite arbitrary files with the contents of exported documents via a call to the "SaveToFile()" method with a specially crafted "bstrFileName" argument. Successful exploitation of this vulnerability allows execution of arbitrary code.

  TREND MICRO PROTECTION INFORMATION

  • Apply associated live casino online DPI Rules.
  • Update your software to the latest releases. You may do so for this particular software here:
    The adoption of large language models (LLMs) and Generative Pre-trained Transformers (GPTs), such as ChatGPT, by leading firms like Microsoft, Nuance, Mix and Google CCAI Insights, drives the industry towards a series of transformative changes. As the use of these new technologies becomes prevalent, it is important to understand their key behavior, advantages, and the risks they present.
    Read more   
  • Open Ran Attack of xApps
    Open RAN: Attack of the xApps
    This article discusses two O-RAN vulnerabilities that attackers can exploit. One vulnerability stems from insufficient access control, and the other arises from faulty message handling
    Read more   
  • A Closer Exploration of Residential Proxies and CAPTCHA-Breaking Services
    A Closer Exploration of Residential Proxies and CAPTCHA-Breaking Services
    This article, the final part of a two-part series, focuses on the details of our technical findings and analyses of select residential proxies and CAPTCHA-solving services.
    Read more   
  • How Residential Proxies and CAPTCHA-Solving Services Become Agents of Abuse
    How Residential Proxies and CAPTCHA-Solving Services Become Agents of Abuse
    This article, the first of a two-part series, provides insights on how abusers and cybercriminals use residential proxies and CAPTCHA-solving services to enable bots, scrapers, and stuffers, and proposes security countermeasures for organizations.
    Read more