Attacking COM via Word RTF

March 30, 2021 • Presentation

By

Will Dormann

Learn how Microsoft Word 2019 on Windows 10 is not too different from the IE6 ActiveX attack surface.

Publisher

Software Engineering Institute

Topic or Tag

Security Vulnerabilities

Abstract

Do you remember IE6 and the fun we had with ActiveX? We've come a long way since then, right? Or have we? In this presentation, given at GRIMMCon 0x4, Will Dormann describes how Microsoft Word 2019 on Windows 10 is not too different from the dark old days of the IE6 ActiveX attack surface.