U tweetove putem weba ili aplikacija drugih proizvođača možete dodati podatke o lokaciji, kao što su grad ili točna lokacija. Povijest lokacija tweetova uvijek možete izbrisati. Saznajte više
The micropatch simply overrides Outlook's reading of WebView settings for determining whether Home Page is enabled, and makes Outlook believe the answer is "disabled" regardless of what the Registry says. This prevents the bypass. Source code contains just one instruction:pic.twitter.com/1G4OjnaqhJ
The micropatch is currently written for the last vulnerable version of Outlook 2016 but it will be trivial to port it to any other affected Outlook version. Anyone interested is welcome to contact us at sales@0patch.com
A good article on recent exploitation of CVE-2017-11774 by Iran-nexus threat actors from @FireEye:https://www.fireeye.com/blog/products-and-services/2020/01/fireeye-response-to-mounting-us-iran-tensions.html …
Outlook Click-to-run (O365) is vulnerable to home page abuse – but it’s not technically the CVE. We explored that in our “Breaking the Rules” mitigation blog. https://twitter.com/itsreallynick/status/1222158192811089923?s=21 …
Can this @0patch apply to O365 Click-to-run?https://twitter.com/itsreallynick/status/1222158192811089923 …
We're going to test that. Most modules we've seen are identical between Office 2016 and Office 365 so if that's the case here, the micropatch applies to O365 too. Otherwise we'd have to port it but in either case, it would prevent the bypass. Thanks for pointing this out.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.
