• info
• discussion
• exploit
• solution
• references

Microsoft Office Hyperlink Signing Weakness

Microsoft Office fails to securely sign Office documents properly.

Attackers can leverage this weakness to manipulate signed documents in a manner such that the signature remains intact.

The weakness will result in a false sense of security and could help attackers exploit other latent vulnerabilities.

Microsoft Office 2007 is vulnerable; other versions may also be affected.