Question posted 2010 · +2 upvotes
Is there any way that I can embed a .exe file in a .pdf, .doc, .xls, or .ppt file in such a way that upon opening the containing file, the document processor will run the .exe automatically without the user intentionally executing it?
Accepted answer +10 upvotes
Yes, this is totally possible and pretty easy to accomplish. You can use one of the many Adobe Acrobat Exploits in the Metasploit framework. Next you can use a download+exec shellcode to download and execute your payload, err I mean “.exe”.
Top ms-office Q&A (6)
- Detect whether Office is 32bit or 64bit via the registry +45 (2010)
- Installing Office Customization +31 (2009)
- What does the 'x' in the extensions aspx, docx, xlsx, etc. represent? +11 (2010)
- MSOFFICE MIME type verification +10 (2012)
- Problems with office automation in asp.net. I can use alternatives such as open-office, if I knew how +10 (2010)
- How To Disable "The document being saved contains tracked changes" Word Dialog Using C# +9 (2011)
ms-office solutions on this site
.