 |
|
|
|
Make sure
you're protected
on all sides |
|
| |
|
|
|
|
 |
|
If possible, use several different anti-virus programs. It is quite possible that one program won't locate a virus when the other will.
|
 
 |
|
|
 Five new security flaws reported in MS Office applications
September 4, 2003
Microsoft has released five advisories on Wednesday, warning of vulnerabilities in its software, including one of "critical" severity that affects nearly all programs in its Office suite of software.
The most serious flaw, in the Visual Basic for Applications (VBA) software could enable an attacker to read files on a victim's computer, run programs or otherwise seize control. The company has posted patches for each of the flaws on its Web site.
This critical vulnerability affects the following applications:
- Visual Basic for Applications SDK 5.0, 6.0, 6.2, and 6.3
- Office 97, 2000, and XP
- Word 98 (J)
- Visio 2000 and 2002
- Project 2000 and 2002
- Publisher 2002
- Works Suite 2001, 2002, and 2003
- Business Solutions Great Plains 7.5
- Business Solutions Dynamics 6.0 and 7.0
- Business Solutions eEnterprise 6.0 and 7.0
- Business Solutions Solomon 4.5, 5.0, and 5.5
Unlike the flaw exploited by the recent Blaster/Lovesan worm - which could attack computers even if the user did nothing, in this case, a victim would have to receive and open a maliciously crafted document to start an attack.
If Microsoft's Outlook e-mail client is set up to use Word as the default program for editing HTML Web code, however, the vulnerability could be exploited by responding to or forwarding a message with a malicious attachment.
The other four vulnerabilities affect Microsoft Office, Access, Word and Windows, and include flaws of lower severity.
Microsoft has disclosed 38 security flaws so far this year.
Here are the links to all five advisories:
|
|
|
|
|
|
Make "PC Flank" your
Start Page!
|
|
|
