Office Smart Tags for CVE and Microsoft Security Bulletins

Published 13 April 05 06:48 PM

While diddling around with Office Smart Tags, I decided to build a couple to handle MS bulletins and CVE/CAN vulnerability numbers.

Just save the two XML files below, and drop them into C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS and you should be good to go.

If you don't see a bulletin number (eg; MS05-011) or a CAN/CVE number (eg; CAN-2005-0001) highlighted with the Smart Tag thingy, go to:

Tools | AutoCorrect Options | Smart Tags

And make sure you have the MSRC Search and CVE Search tags enabled.

Cve.Xml

<FL:smarttaglist xmlns:FL="urn:schemas-microsoft-com:smarttags:list">
 <FL:name>Mitre CVE Lookup</FL:name>
 <FL:lcid>1033,0</FL:lcid>
 <FL:description>Lookup up a CVE/CAN Vulnerability</FL:description>
 <FL:moreinfourl>http://msdn.microsoft.com/msdnmag</FL:moreinfourl>
 <FL:updateable>false</FL:updateable>
 <FL:autoupdate>false</FL:autoupdate>
 <FL:lastcheckpoint>0</FL:lastcheckpoint>
 <FL:lastupdate>0</FL:lastupdate>
 <FL:updateurl></FL:updateurl>
 <FL:updatefrequency>0</FL:updatefrequency>
 <FL:smarttag type="urn:schemas-microsoft-com:office:smarttags#cve">
  <FL:caption>CVE Search</FL:caption>
  <FL:re>
   <FL:exp switches="i">\b(can|cve)-\d{4}-\d{4}\b</FL:exp>
  </FL:re>
  <FL:actions>
   <FL:action id="CAN">
    <FL:caption>Find Vulnerability</FL:caption>
    <FL:url>http://cve.mitre.org/cgi-bin/cvename.cgi?name={TEXT}</FL:url>
   </FL:action>
  </FL:actions>
 </FL:smarttag>
</FL:smarttaglist>

Msrc.Xml

<FL:smarttaglist xmlns:FL="urn:schemas-microsoft-com:smarttags:list">
 <FL:name>Microsoft Bulletin Lookup</FL:name>
 <FL:lcid>1033,0</FL:lcid>
 <FL:description>Lookup up a Microsot Security Bulletin</FL:description>
 <FL:moreinfourl>http://msdn.microsoft.com/msdnmag</FL:moreinfourl>
 <FL:updateable>false</FL:updateable>
 <FL:autoupdate>false</FL:autoupdate>
 <FL:lastcheckpoint>0</FL:lastcheckpoint>
 <FL:lastupdate>0</FL:lastupdate>
 <FL:updateurl></FL:updateurl>
 <FL:updatefrequency>0</FL:updatefrequency>
 <FL:smarttag type="urn:schemas-microsoft-com:office:smarttags#msft-msrc">
  <FL:caption>MSRC Search</FL:caption>
  <FL:re>
   <FL:exp switches="i">\b(ms)\d{2}-\d{2,3}\b</FL:exp>
  </FL:re>
  <FL:actions>
   <FL:action id="MSRC">
    <FL:caption>Find Vulnerability</FL:caption>
    <FL:url>http://www.microsoft.com/technet/security/Bulletin/{TEXT}.mspx</FL:url>
   </FL:action>
  </FL:actions>
 </FL:smarttag>
</FL:smarttaglist>

 

by michael_HOWARD
Filed under:

Comments

# Sourabh said on April 14, 2005 11:50 AM:
This is great. Took me some time to figure out Tools->Auto Correct Option is in Word2003 not Outlook2003.

It is especially cool, when reading the MS Security Bulletin Summary emails to get links to the details.
# Michael Howard's Web Log said on March 18, 2008 11:24 PM:

I'm always looking up CVEs so I want to get to the data as quickly as possible, especially if I'm digging

# MSDN Blog Postings » IE8 Activity to lookup CVEs and Microsoft bulletins said on March 19, 2008 12:36 AM:

PingBack from http://msdnrss.thecoderblogs.com/2008/03/19/ie8-activity-to-lookup-cves-and-microsoft-bulletins/

# IE8 Activity to lookup CVEs and Microsoft bulletins | IT &amp; Network Security Blog said on July 13, 2008 1:04 PM:

PingBack from http://ntoolz.net/blog/2008/07/13/security-news/ie8-activity-to-lookup-cves-and-microsoft-bulletins/

New Comments to this post are disabled
Page view tracker