{"guid":"133a51ac-c557-50f1-baed-603e708fbba1","title":"VBA, CFB, WTF?! - Über den Aufbau von Office-Dokumenten und historische Schwachstellen","subtitle":null,"slug":"2025-529-vba-cfb-wtf-uber-den-aufbau-von-office-dokumenten-und-historische-schwachstellen","link":"https://talks.mrmcd.net/2025/talk/EC9DSV/","description":"Eine kleine Reise in die oberen Schichten des Eisbergs der pre-2007 und post-2007 Office-Dateiformate. Seid gespannt auf Microsoft Besonderheiten und historische Schwachstellen.\n\nIn diesem Talk schauen wir uns den generellen Aufbau von Office-Dokumenten und detaillierteren Aufbau von VBA-Makros und deren Signaturen an.\nWeiter kommen dazu Sicherheitslücken und Angriffsvektoren, wie diese mit den falsch / unzureichend dokumentierten Dateiformat(en) zusammenhängen, der Aufbau dieser lustigen Dateiformate und sonstige random office-security Trivia. \nGenießt also eine Reise durch das wundervolle Konzept von Compoud-File-Binaries, wie diese teils das neue Office Dateiformat ab 2007 überlebt haben und was sonst eigentlich so in den Dateien steckt.\nDer Talk ist als Intro gedacht und somit wahrscheinlich für Menschen mit tiefem Wissen (jenseits der Zusammensetzung der Signaturen) uninteressant.\n\nhttps://creativecommons.org/licenses/by-sa/4.0/","original_language":"deu","persons":["j0nas"],"tags":["529","2025","mrmcd25","C110 - Kleine Anfrage","mrmcd25-deu","Darmstadt","mrmcd25","Day 1"],"view_count":436,"promoted":false,"date":"2025-09-12T17:20:00.000+02:00","release_date":"2025-09-12T00:00:00.000+02:00","updated_at":"2026-04-13T23:45:05.990+02:00","length":2926,"duration":2926,"thumb_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd25/529-133a51ac-c557-50f1-baed-603e708fbba1.jpg","poster_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd25/529-133a51ac-c557-50f1-baed-603e708fbba1_preview.jpg","timeline_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd25/529-133a51ac-c557-50f1-baed-603e708fbba1.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd25/529-133a51ac-c557-50f1-baed-603e708fbba1.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/2025-529-vba-cfb-wtf-uber-den-aufbau-von-office-dokumenten-und-historische-schwachstellen","url":"https://api.media.ccc.de/public/events/133a51ac-c557-50f1-baed-603e708fbba1","conference_title":"MRMCD 2025 - Volle Transparenz","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd25","related":[],"recordings":[{"size":268,"length":2926,"mime_type":"video/webm;codecs=av01","language":"deu","filename":"mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_av1-hd.webm","state":"new","folder":"av1-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-09-12T21:03:15.526+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd25/av1-hd/mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_av1-hd.webm","url":"https://api.media.ccc.de/public/recordings/90780","event_url":"https://api.media.ccc.de/public/events/133a51ac-c557-50f1-baed-603e708fbba1","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd25"},{"size":44,"length":2926,"mime_type":"audio/mpeg","language":"deu","filename":"mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2025-09-12T20:28:27.876+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd25/mp3/mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/90773","event_url":"https://api.media.ccc.de/public/events/133a51ac-c557-50f1-baed-603e708fbba1","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd25"},{"size":32,"length":2926,"mime_type":"audio/opus","language":"deu","filename":"mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2025-09-12T20:27:22.076+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd25/opus/mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_opus.opus","url":"https://api.media.ccc.de/public/recordings/90772","event_url":"https://api.media.ccc.de/public/events/133a51ac-c557-50f1-baed-603e708fbba1","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd25"},{"size":290,"length":2926,"mime_type":"video/webm","language":"deu","filename":"mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-09-12T21:00:23.869+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd25/webm-hd/mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/90779","event_url":"https://api.media.ccc.de/public/events/133a51ac-c557-50f1-baed-603e708fbba1","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd25"},{"size":113,"length":2926,"mime_type":"video/webm","language":"deu","filename":"mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2025-09-12T20:54:19.225+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd25/webm-sd/mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/90778","event_url":"https://api.media.ccc.de/public/events/133a51ac-c557-50f1-baed-603e708fbba1","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd25"},{"size":103,"length":2926,"mime_type":"video/mp4","language":"deu","filename":"mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2025-09-12T20:32:37.610+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd25/h264-sd/mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_sd.mp4","url":"https://api.media.ccc.de/public/recordings/90775","event_url":"https://api.media.ccc.de/public/events/133a51ac-c557-50f1-baed-603e708fbba1","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd25"},{"size":285,"length":2926,"mime_type":"video/mp4","language":"deu","filename":"mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-09-12T20:25:11.231+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd25/h264-hd/mrmcd25-529-deu-VBA_CFB_WTF_-_Ueber_den_Aufbau_von_Office-Dokumenten_und_historische_Schwachstellen_hd.mp4","url":"https://api.media.ccc.de/public/recordings/90771","event_url":"https://api.media.ccc.de/public/events/133a51ac-c557-50f1-baed-603e708fbba1","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd25"}]}