search menu icon-carat-right cmu-wordmark

Attacking COM via Word RTF

Presentation
Learn how Microsoft Word 2019 on Windows 10 is not too different from the IE6 ActiveX attack surface.
Publisher

Software Engineering Institute

Abstract

Do you remember IE6 and the fun we had with ActiveX? We've come a long way since then, right? Or have we? In this presentation, given at GRIMMCon 0x4, Will Dormann describes how Microsoft Word 2019 on Windows 10 is not too different from the dark old days of the IE6 ActiveX attack surface.