Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

oleobj: detect remote templates and other remote references in OLE files #826

Open
decalage2 opened this issue Oct 9, 2023 · 1 comment

Comments

@decalage2
Copy link
Owner

decalage2 commented Oct 9, 2023

oleobj detects remote references in OpenXML files (docx, xlsx, pptx), but not in legacy OLE files (doc, xls, ppt). For example this sample is not detected:

It looks like the remote template reference is in the 1Table stream (e.g. template URL in Unicode), so a parser would need to be implemented unless we can find one.

@decalage2 decalage2 self-assigned this Oct 9, 2023
@decalage2 decalage2 added this to the Next Release milestone Oct 9, 2023
@decalage2
Copy link
Owner Author

Partial 1Table parser: http://blog.digitally-disturbed.co.uk/2012/04/reading-microsoft-word-doc-files-in.html
See also #81 (comment) to select 1Table or 0Table.
And https://github.com/decalage2/olefile/pull/114/files also parses 1Table partially.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant