Microsoft Office has "extremely critical" hole

orangepeel · 06-12-2006, 11:07

Microsoft Office has "extremely critical" hole
Don't mess with untrusted Word docs
By INQUIRER newsdesk: Wednesday 06 December 2006, 10:10

SECUNIA SAID that an extremely critical hole in Word can be exploited by wicked people.

The bug applies to Office 2000, Office 2003, Office 2004 for Mac and also to the Microsoft Works Suite.

"An unspecified error" in the handling of Word docs can be exploited to cause memory corruption.

The fix is not to open or to save "untrusted" Word documents says the warning, here

That would mean you probably have to be careful when you're browing the Interweb and find documents lying around there, we guess. Sheesh and kebabbed. µ

Original Article Microsoft Office has 'extremely critical' hole

Recommended Fix: - OpenOffice.org: Home

**stepheno** · 06-12-2006, 12:27

Office 2K

that includes me. Thanks for the headsup OP

fionaB · 06-12-2006, 14:43

me as well!

Rob Barron · 06-12-2006, 14:59

I hope that wasn't sent in an email. I have received that one a hundred times over and sorry but that is a HOAX message. It is not true at all, but I know loads of people who thought it was and it scared them.

There is no hole in Word that will crash your memory. The other thing: That site (News Inquirer) is not a reliable source of information as it just trawls the internet and finds stories wherever without checking their validity.

Hope that at least sets your mind at rest if your a Word user.

Cheers,
Rob

orangepeel · 06-12-2006, 15:33

fine. you just ignore it then. i would suggest others at least follow the secunia link and judge for themselves however.

As for the inq - i'm not getting dragged into that argument again. If u don't like em, don't read my posts as I quote em a lot.

Nathan · 07-12-2006, 09:16

The thing is guys you're both right.

The Inquirer are being alarmist, because lets face it it's just a flaw which has been found. As yet it's just a proof of concept to say that there could be a problem but so far there's nothing to exploit it.

Secunia are just highlighting that there's a potential attack vector NOT a valid piece of malware in the wild doing the damage.

If you actually read the MS advisory Microsoft Security Advisory (929433): Vulnerability in Microsoft Word Could Allow Remote Code Execution you'll note that it was MS themselves that raised the issue.

So in a sense it's not a hoax and as yet it's not something to worry about. My suggestion would be to install protection against memory corruption and buffer under/overflows.

j sotelo · 08-12-2006, 05:12

Nathan is right..here in the U.S.A , I also read , I think it was in Google news *yikes* Microsofts enemy, well anyway i read about the same vulnerability so I also downloaded the patch just to be in the safe side..... I really dont think microsoft would make a patch for something that didnt exist...

orangepeel · 15-12-2006, 09:35

here's a third hole Another MS Word bug found

orangepeel · 15-12-2006, 13:54

Word vulnerability number three tips up

06-12-2006, 11:07	#1 (permalink)
orangepeel Feet under the table Join Date: Mar 2006 Location: Edinburgh Posts: 1,507	Microsoft Office has "extremely critical" hole Microsoft Office has "extremely critical" hole Don't mess with untrusted Word docs By INQUIRER newsdesk: Wednesday 06 December 2006, 10:10 SECUNIA SAID that an extremely critical hole in Word can be exploited by wicked people. The bug applies to Office 2000, Office 2003, Office 2004 for Mac and also to the Microsoft Works Suite. "An unspecified error" in the handling of Word docs can be exploited to cause memory corruption. The fix is not to open or to save "untrusted" Word documents says the warning, here That would mean you probably have to be careful when you're browing the Interweb and find documents lying around there, we guess. Sheesh and kebabbed. µ Original Article Microsoft Office has 'extremely critical' hole Recommended Fix: - OpenOffice.org: Home __________________

06-12-2006, 12:27	#2 (permalink)
stepheno Pixalo Crew Join Date: Jul 2005 Posts: 6,844	Re: Microsoft Office has "extremely critical" hole Office 2K that includes me. Thanks for the headsup OP

06-12-2006, 14:43	#3 (permalink)
fionaB Loves the place Join Date: Sep 2006 Location: Scotland Posts: 5,621	Re: Microsoft Office has "extremely critical" hole me as well!

06-12-2006, 14:59	#4 (permalink)
Rob Barron Loves the place Join Date: Sep 2006 Location: Poole, Dorset Posts: 5,386	Re: Microsoft Office has "extremely critical" hole I hope that wasn't sent in an email. I have received that one a hundred times over and sorry but that is a HOAX message. It is not true at all, but I know loads of people who thought it was and it scared them. There is no hole in Word that will crash your memory. The other thing: That site (News Inquirer) is not a reliable source of information as it just trawls the internet and finds stories wherever without checking their validity. Hope that at least sets your mind at rest if your a Word user. Cheers, Rob __________________ Rob Barron robbarron@aol.com If you look down on other people, don't expect them to look up to you!

06-12-2006, 15:33	#5 (permalink)
orangepeel Feet under the table Join Date: Mar 2006 Location: Edinburgh Posts: 1,507	Re: Microsoft Office has "extremely critical" hole fine. you just ignore it then. i would suggest others at least follow the secunia link and judge for themselves however. As for the inq - i'm not getting dragged into that argument again. If u don't like em, don't read my posts as I quote em a lot.

07-12-2006, 09:16	#6 (permalink)
Nathan New here Join Date: Nov 2006 Location: Derbyshire Posts: 43	Re: Microsoft Office has "extremely critical" hole The thing is guys you're both right. The Inquirer are being alarmist, because lets face it it's just a flaw which has been found. As yet it's just a proof of concept to say that there could be a problem but so far there's nothing to exploit it. Secunia are just highlighting that there's a potential attack vector NOT a valid piece of malware in the wild doing the damage. If you actually read the MS advisory Microsoft Security Advisory (929433): Vulnerability in Microsoft Word Could Allow Remote Code Execution you'll note that it was MS themselves that raised the issue. So in a sense it's not a hoax and as yet it's not something to worry about. My suggestion would be to install protection against memory corruption and buffer under/overflows. __________________ Nathan. --------- Xbox Live: NathanJT QOTM: "Religious wars are basically people fighting over who has the best imaginary friend!"

08-12-2006, 05:12	#7 (permalink)
j sotelo Feet under the table Join Date: Nov 2006 Location: San Diego, Ca. Where the Surf meets the Turf Posts: 1,949	Re: Microsoft Office has "extremely critical" hole Nathan is right..here in the U.S.A , I also read , I think it was in Google news yikes Microsofts enemy, well anyway i read about the same vulnerability so I also downloaded the patch just to be in the safe side..... I really dont think microsoft would make a patch for something that didnt exist...

15-12-2006, 09:35	#8 (permalink)
orangepeel Feet under the table Join Date: Mar 2006 Location: Edinburgh Posts: 1,507	Re: Microsoft Office has "extremely critical" hole here's a third hole Another MS Word bug found

15-12-2006, 13:54	#9 (permalink)
orangepeel Feet under the table Join Date: Mar 2006 Location: Edinburgh Posts: 1,507	Re: Microsoft Office has "extremely critical" hole Word vulnerability number three tips up

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
'Highly Critical' bugs in Sun's "Open Office" software	Steve	Computer hardware, software, networking and internet	0	23-03-2007 09:36
Extremely critical exploit in active X controls in IE6 and IE7	Steve	Computer hardware, software, networking and internet	0	05-11-2006 20:52
Richard Hammond "critical" after crash!	Matt F	General Chat	24	29-09-2006 15:19
WARNING - Resizing Image in "one go" decreases PQ vs "staged" approach	Dave	Photo Manipulation	6	12-10-2005 12:52