Cymulate Finds Logical Bug in Microsoft Office Suite – Word Embedded Video Code Execution
Summary
TEL AVIV, Israel--( BUSINESS WIRE )-- Cymulate , a leading provider of Breach & Attack Simulation (BAS) solutions and a Gartner 2018 Cool Vendor, announced today it has uncovered a security flaw in Microsoft Office Suite which may affect Word users.Cymulate noted that no configuration was required to reproduce the issue and no security warning is presented while opening this document with Microsoft Word.Hackers can replace the current YouTube iframe code with malicious html /JavaScript that would be rendered by Internet Explorer.The following video shows how an attacker would use this feature to trick users to install a required fake software update.By mimicking the myriad of strategies hackers deploy, the system allows businesses to assess their true preparedness to handle cyber security threats effectively.
