Jump to content
scoutt

Word process to PDF

Recommended Posts

I have a user that takes a word document and runs a add-in that creates a PDF. While this runs it creates a cmd.exe file on the users network drive and Anti-Exploit comes up and says Exploit payload process blocked. I don't want to exclude cmd.exe especially from a users network drive. How would one exclude a process like this?

Share this post


Link to post
Share on other sites

Sorry, i thought i was under Anti-Exploit for business. Can somebody please move this.

Share this post


Link to post
Share on other sites

Hi Scoutt.

 

Please attach your MBAE logs. Instructions can be found in the readme first link in my signature.

 

Thanks!

Share this post


Link to post
Share on other sites

Thanks for the logs.

 

It seems the process flow is Winword.exe -> javaw.exe -> cmd.exe.

 

Try temporarily disabling the Java shield on one machine to see if it keeps alerting.

Share this post


Link to post
Share on other sites

Once the client turns off javaw.exe it turns all three. But with it turned off it does work as expected

Share this post


Link to post
Share on other sites

Thanks for confirming scoutt.

 

Allowing Java unrestricted access to issue system commands is not a good idea from a security perspective. Yet many third-party applications use this insecure approach. If you want to continue using this insecure application to rely on printing to PDF simply keep the Java shield turned off.

 

Alternatively you can use other print-to-PDF products that don't make use of insecure practices. For ex Pdf995 will do the same thing without exposing the user to Java exploits.

Share this post


Link to post
Share on other sites

Thanks Pedro,

 

PDF995 won't work in this situation, we have to wait for Oracle to update the software. Appreciate you looking into this.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.