detect executables embedded inside MS Office documents?

[Julian Field]

Ignore all previous requests for information. I've got enough of it, 
pretty much.
The only thing I cannot handle is inserted OLE "Packages" that contain 
multiple files. If someone fancies creating one of those and sending it 
to me, I'll improve the Package parser to cope with it.

But it now works with files inserted into Microsoft Office documents 
just fine.

This will be in the next release.
I guess it's a fairly major new feature, the ability to extract embedded 
files from Microsoft Office documents.
:-)

I think I'm going to have a rest now...

Jules.

Warren Guy wrote:
> Julian Field wrote:
>> There are open-source programs that can extract information from OLE 
>> documents (i.e. up to Office 2004). I suspect there is not a problem 
>> with Office 2007/2008 documents as they are just zip archives.
>>
>> I just wish I could remember the names of any of the stuff that reads 
>> OLE documents...
>
> http://www.pldaniels.com/ripole/
>
> http://search.cpan.org/dist/OLE-Storage_Lite/Storage_Lite.pm
>
> There's also the libcole library, but I can't find it on the web
>

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.