Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > rocksolid.shared.security > #50 > unrolled thread

zero-click, wormable, cross-platform remote code execution in Microsoft Teams

Started byAnonymous <poster@anon.com>
First post2020-12-07 12:11 -0800
Last post2020-12-26 15:49 -0800
Articles 6 — 2 participants

Back to article view | Back to rocksolid.shared.security


Contents

  zero-click, wormable, cross-platform remote code execution in Microsoft  Teams Anonymous <poster@anon.com> - 2020-12-07 12:11 -0800
    None Anonymous <poster@anon.com> - 2020-12-10 22:08 -0800
    None Anonymous <poster@anon.com> - 2020-12-10 18:33 -0800
      Re: None Anonymous@novabbs.i2p (Anonymous) - 2020-12-13 23:24 +0000
    None Anonymous <poster@anon.com> - 2020-12-13 15:51 -0800
    None Anonymous <poster@anon.com> - 2020-12-26 15:49 -0800

#50 — zero-click, wormable, cross-platform remote code execution in Microsoft Teams

FromAnonymous <poster@anon.com>
Date2020-12-07 12:11 -0800
Subjectzero-click, wormable, cross-platform remote code execution in Microsoft Teams
Message-ID<opsec.747.3g5ous@anon.com>
But don't worry, according to MS the class of this vuln is only "Important, Spoofing", which is about as low as it gets.
And Teams only has 115 Mio daily users, what's the worst that can happen ? lol

-- 
Posted on def2

[toc] | [next] | [standalone]


#51 — None

FromAnonymous <poster@anon.com>
Date2020-12-10 22:08 -0800
SubjectNone
Message-ID<opsec.750.3y7cuf@anon.com>
In reply to#50
>>a7fe3e336c45cf68a2
How do they do that ? Isn't most of the programs available for Linux as well by now ?
(me --> have to use MS at work each day)

-- 
Posted on def2

[toc] | [prev] | [next] | [standalone]


#53 — None

FromAnonymous <poster@anon.com>
Date2020-12-10 18:33 -0800
SubjectNone
Message-ID<opsec.749.1emjn6@anon.com>
In reply to#50
The university where I study forces us to use MS during lockdown :(

-- 
Posted on def2

[toc] | [prev] | [next] | [standalone]


#54 — Re: None

FromAnonymous@novabbs.i2p (Anonymous)
Date2020-12-13 23:24 +0000
SubjectRe: None
Message-ID<16e1725aaacd85760f14ba1776a931b3$1@www.novabbs.com>
In reply to#53
Anonymous wrote:

> The university where I study forces us to use MS during lockdown :(

You may have a case against them (torture)

-- 
Posted on novaBBS
www.novabbs.com

[toc] | [prev] | [next] | [standalone]


#55 — None

FromAnonymous <poster@anon.com>
Date2020-12-13 15:51 -0800
SubjectNone
Message-ID<opsec.753.qsri7@anon.com>
In reply to#50
>>d28ba24928343a6a76
I seriously contemplated this option against my employer, not for torture but for violation of privacy laws. In my jurisdiction this could maybe make a case, depending on what they do exactly. Microsoft sure gives a lot of options lately.

-- 
Posted on def2

[toc] | [prev] | [next] | [standalone]


#58 — None

FromAnonymous <poster@anon.com>
Date2020-12-26 15:49 -0800
SubjectNone
Message-ID<opsec.758.ocl1r@anon.com>
In reply to#50
so does anyone have non redacted version of the RCE?

-- 
Posted on def2

[toc] | [prev] | [standalone]


Back to top | Article view | rocksolid.shared.security


csiph-web