Microsoft warns of Office flaw; Office 2004 for Mac potentially vulnerable

“Microsoft has warned of an unpatched vulnerability in its Office productivity suite,” John Leyden reports for The Register.

“The bug, which arises from an unspecified flaw in handling strings, might be exploited to corrupt memory on a vulnerable system. The flaw allows malware to be loaded onto exposed systems providing users are tricked into opening maliciously-constructed files. Computers running Microsoft Office 2000, Office XP, Office 2003, and Microsoft Office 2004 for Mac are all potentially vulnerable,” Leyden reports.

Leyden reports, “Users are advised not to open untrusted Office documents pending the release of patches from Microsoft.”

Full article with more info and links here.

[Thanks to MacDailyNews Reader “RadDoc” for the heads up.]

Related article:
Mac users should not buy Microsoft software (or hardware) – May 16, 2003

21 Comments

  1. Another day another Windows or Office vulnerability, so what else is new? Didn’t Bill Gates just say last week that Macs are exploited daily, but that Microsoft software is much more secure and doesn’t have that problem? I’m still waiting to see the proof of that. Sounds like you’re full of sh*t to me Bill.

  2. “The flaw allows malware to be loaded onto exposed systems providing users are tricked into opening maliciously-constructed files.”
    What malware? An Office 2004 update?
    I’m still using Office vX in its 10.1.8 version. Outdated, but reasonably stable for a MS application.

  3. Eh, nice computer you got there, bub. Be kinda sad if something were to *happen* to it, if ya catch my drift.

    I’m not sayin’ somethin’ *will* happen, just that it could. Ya know?

    ‘be a shame.

    My associates and I have a “Package” you may be interested in. Yeah.

    We call it “Microsoft Office 2007.”

  4. Sure glad I use pages and keynote instead of Microsh*t Orifice…

    Leaves you with a hole new feeling, huh…
    ” width=”19″ height=”19″ alt=”smile” style=”border:0;” />

    I prefer not to use his sh1te…

    MDN: his

  5. Sadly, I have no choice in the matter – what with my being on just one of a handful of Macs in a sea of PCs – I’ll take the risk any day over having to constantly worry about the next winders exploit.

    Remember – Bill Gates himself said recently that Macs see a hack/exploit/security issue every day – ONE per DAY. Wow – that’s a LOT, huh? Looks like 365 problems in an entire year. Wow. I’m shaking in my boots, there, Tex.

    So, ever wonder how many “per day” M$ has had to deal with? Hmmmm…. lessee here – in 2005 that number was, according to established reports, about 114,000. Let’s divide that even number by 365 days in a year, shall we? That comes to a little over 300 bugs, viruses, trojan horses, etc. released into the wild to wreak havoc on the unsuspecting WinxPC user EVERY SINGLE DAY THAT YEAR. Almost as many in a SINGLE DAY as we poor Mac users might need to deal with. At some point.

    Down the road. Eventually. Maybe.

    Given those odds, I’m only too happy to take my chances with my Mac.

  6. “Computers running Microsoft Office 2000, Office XP, Office 2003, and Microsoft Office 2004 for Mac are all potentially vulnerable,” Leyden reports.”

    Wouldn’t a Mac user have to authorize the actual installation of the malware via a password? And even if that happens, wouldn’t that malware be limited to the authorization of the Mac user (who should not be running as root).

    That, in my opinion, is one of the many strengths of a true multiuser OS, like MacOS X.

  7. Dear KingMe!

    We in the “real IT world” fully understand how dangerous the MAC OS is and you do not.

    Applications can be installed without the permission of a User or an Administrator.

    In fact an application can run from any mounted disk image without ever being copied to the hard drive.

    We in the enterprise world our now enjoying the Vista Wow!

    Meanwhile Apple computers are being attacked on a daily basis – without any support from Apple.

    Additionally there are no tools available for administrators to use, to help protect, the tiny number of Apple PC’s that are connected to our networks.

    ©

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.