Technology news and Jobs 
Information Technology News Zero-day Word vulnerability
Information Technology News Zero-day Word vulnerability | Zero-day Word vulnerability |
|
|
|
| Written by Stephen Withers | |
| Friday, 16 February 2007 | |
|
According to the bulletin, Office 2000 and XP are affected, but not 2003 or 2007. Attacks are said to be limited and targeted so far. Microsoft has updated Windows Live OneCare security scanner to detect attempted exploits and will share relevant information with Microsoft Security Alliance Partners. A permanent fix for the problem is under development. Otherwise, the advice is to avoid opening Office files from untrusted sources. Given the targeted nature of such attacks, that could be difficult as the document could arrive in an email apparently from a known associate, customer, supplier or even a government agency. Targeting also means that any particular attack is more likely to get through to the intended victim - the more common scattergun approach is more likely to come to the attention of software and security vendors before any particular organisation is hit. But an attack aimed specifically at a handful of people within your organisation is much harder to detect before it is too late.{moscomment}
Get stories like this delivered daily - FREE - subscribe now When you subscribe get a 12 months license for LiveProject Valued at $99 USD  Download the FREE iTWire desktop alert widget
  |
Tags
| < Prev | Next > |
|---|
Subscribe to iTWire's daily e-newsletter now and get a FREE 12 month license to project management software valued at $99 USD. 
