Hole in Microsoft Word for Windows and Mac Allows Attack from Internet 12/6/2006 - 1,472 views, 1 Comment
|
Previous Article « IE7 - Microsoft Internet Explorer 7 - Should You Install It?
Read Next Article » Online Maps and Directions Blamed for Man’s Death in Snowy Oregon
Microsoft has advised that they are working on investigating a vulnerability in Word for Windows and Mac which allows attackers to gain access to a user’s home computer. “In order for this attack to be carried out, a user must first open a malicious Word file attached to an e-mail or otherwise provided to them by an attacker. As a best practice, users should always exercise extreme caution when opening unsolicited attachments from both known and unknown sources,” advised Microsoft. The way it works is that the attacker (the bad guy) either sends a Word file in email, or gets someone to visit a website hosting the malicious Word file and gets them to download it. Once the malicious Word file is on the user’s computer, it takes advantage of the flaw in Microsoft Word, allowing the attacker access to the user’s computer. Microsoft says that all of the following versions of Word are at risk: Microsoft Word 2000, Microsoft Word 2002, Microsoft Office Word 2003, Microsoft Word Viewer 2003, Microsoft Word 2004 for Mac, and Microsoft Word 2004 v. X for Mac, as well as Microsoft Works 2004, 2005, and 2006. The best way to avoid having your computer compromised in this way is to use extreme caution in opening any file sent to you by anybody. If you aren’t expecting the file, don’t open it unless and until you first ask the sender whether they in fact sent it.
Previous Article « IE7 - Microsoft Internet Explorer 7 - Should You Install It?
Read Next Article » Online Maps and Directions Blamed for Man’s Death in Snowy Oregon
|
|
Email the link for this page to a friend! |
Read more:
» Security Hole in Microsoft Excel
» Security Hole in Word Allows Attack Through Email with Ginwui.a Trojan
» Microsoft Word Vulnerability Exploit Through Jet Database: Word Up on Security Hole
» Microsoft Issues Nine New Security Updates and Patches Affecting Large Number of Windows Users
For additional similar stories check out our archives on Apple & Mac, Microsoft, Security, Windows



Typical lack of information : what exactly does the attacker do on a Macintosh computer ? Run a macro ? Macros can’t reach the protected levels of Mac OS X, so how could this flaw affect Mac security.
Can we have some more information, please ?
Comment by gregwah — 12/6/2006 @ 12:49 pm