pentester.land· Nov 11, 2022· by Simon Rohlmann, Vladislav Mladenov, Christian Mainka, Daniel Hirschberger, Jörg Schwenk

Every Signature is Broken: On the Insecurity of Microsoft Office’s OOXML Signatures

Open Original Article ↗
Target Program: Microsoft
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Signature bypass#Signature forgery#Cryptographic issues#Windows