VRT Advisories


VRT Tool 2007-08-01

Sourcefire VRT Tool Tool Update

Date: 2007-08-01

Synopsis:

The OfficeCat tool has been updated to address a possible issue when processing some documents.

Details:

The OfficeCat tool has been updated to address a possible issue when processing some documents.

Many thanks to James O'Connor of Symantec for actually using OfficeCat and finding the problem. We would like to hear from more people, we would like feature requests, post cards, bug reports and beer.

Please send feature requests and bug reports via email to vrt@sourcefire.com. Post cards and beer can be sent to the Sourcefire VRT, 9780 Patuxent Woods Drive, Columbia, MD 21045, USA.

Additionally, malware samples would be most appreciated, please contact vrt@sourcefire.com if you have some to share.

The OfficeCat tool is able to process Word, Excel and PowerPoint files and will return the appropriate reference information should possible exploit conditions be present in the document.

OfficeCat Tool Download:

Download zip archive here.

Usage Instructions:

  1. Unzip the archive
  2. Open a command shell
  3. Execute the tool executable with a document name for checking

About the VRT:

The Sourcefire VRT is a group of leading edge intrusion detection and prevention experts working to proactively discover, assess and respond to the latest trends in hacking activity, intrusion attempts and vulnerabilities.

About Sourcefire

Sourcefire, Inc., the world leader in intrusion prevention, is transforming the way organizations manage and minimize network security risks with its 3D Approach - Discover, Determine, Defend - to securing real networks in real-time. For more information about Sourcefire, please visit www.sourcefire.com.