[EMAIL PROTECTED]: data hidden in Word docs, revisited]

[Geoff Lane <[EMAIL PROTECTED]>]

----- Forwarded message from H Carvey <[EMAIL PROTECTED]> -----
Specifically, there seems to be a revision log
maintained in Word documents, in Unicode.  The
implementation of the API to request revision info (via
Perl and OLE) doesn't see this data...but Richard
Smith's utility does, as does strings.exe from
SysInternals.com.

Does anyone have any information that may explain this?

----------

It the Word "fastsave" function.  It doesn't strip out any deleted material
so a utility such as catdoc can trivially extract deleted text.

-- 
Geoff Lane
7 Aug 03 - The day SCO died; just waiting for the body to hit the ground.

-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com