Text 25471, 59 rader
Skriven 2006-12-18 19:29:17 av Alan Zisman (1:123/789.0)
  Kommentar till text 25447 av George Vandervort (1:382/8)
Ärende: Word Documents
======================
In article <27410$WIN95@JamNNTPd>,
 "George Vandervort -> Alan Zisman" <1:382/8> wrote:

 GV> Hello Alan!


 GV> === Cut ===

 GV> Microsoft Office has "extremely critical" hole

 GV> Don't mess with untrusted Word docs
 GV> By INQUIRER newsdesk: Wednesday 06 December 2006, 10:10

 GV> SECUNIA SAID that an extremely critical hole in Word can be exploited by
 GV> wicked people.
 GV> The bug applies to Office 2000, Office 2003, Office 2004 for Mac and
 GV> also to the Microsoft Works Suite.

 GV> "An unspecified error" in the handling of Word docs can be exploited to
 GV> cause memory corruption.

 GV> The fix is not to open or to save "untrusted" Word documents says the
warning,
 GV> Description:
 GV> Two vulnerabilities have been reported in Microsoft Word, which can be
 GV> exploited by malicious people to compromise a user's system.

 GV> 1) An unspecified error in the handling of Word documents can be
 GV> exploited to cause a memory corruption.

 GV> NOTE: According to Microsoft, this vulnerability is already being
 GV> actively exploited on a limited scale.

 GV> 2) An error within the processing of Word documents can be exploited to
 GV> somewhat control the destination address of a memmove() call by
 GV> manipulating a certain DWORD in the document used for calculating the
 GV> destination address.

 GV> Successful exploitation of the vulnerabilities allows execution of
 GV> arbitrary code.

 GV> Solution:
 GV> Do not open or save untrusted Office documents.


 GV> http://www.theinquirer.net/default.aspx?article=36184
 GV> === Cut ===

If you're sending this in response to my suggestion to save OO.org
documents in MS Office formats be default, I don't see anything here
suggesting that this is a problem for OO.org users, whether they save
documents in MS Office or OO.org formats.

-- 
- email: alan (at) zisman (dot) ca
- website: http://www.zisman.ca

--- MT-NewsWatcher/3.5.1 (Intel Mac OS X)
 * Origin: Ad Hoc (1:123/789.0)