Vulnerability In MS Office Could Give Access To Your Computer at CompuWorld

Translate To:

[code via DI]

Flash Updates

Making Of

MP3

Tips Tricks Hacks

Optimize uTorrent Settings
Fantastic FREEBIES
Hacking Tips To Be Safe
Get Back 'Folder Options'
Capture Screenshots In Windows Media Player
Best Anti Virus
Checking Processor Speed
Computer Keeps Restarting
Orkut Scraps As RSS
Cheapest Data Recovery
Easy Fast Uploading
Convert Video Formats
Hidden Tool In XP
Secure Your Network
Notepad Alternative

Google Tips

Top 10 Ways To Improve Your PageRank
Search Google Without Ads
Google Advanced Search
Hidden Google Pages
10 Google Myths
FREE Stuff Via Google
FREE Torrent Files Via Google

Firefox & IE Tweaks

17 Firefox Extensions For Bloggers
Fullscreen in Firefox
20 Firefox Extensions
Preview Tabs In Firefox
Firefox Search Result In New Tab
Run Google Talk In Firefox Sidebar
Speed Up Internet In FireFox
Increase Number Of Simultaneous Downloads In IE7

Vulnerabilities Found

Internet Explorer 7 Flaw
Use Google Video To Hack Password
YouTube Could Be Used To Hack Computer
Yahoo Messenger 8.0+ Vulnerability

A Note About

Parental Control
Vista Short Review
Burning Laptops
To Imporve Eye Sight, Play Games!

Reviewed

NoHeat's Rank Checker
Fake Name Generator
Grafpup 2.0 for Linux
Mac OS X vs Vista
Vista Flavors
Centrino Duo
DivShare's Power Uploader

Vulnerability In MS Office Could Give Access To Your Computer

This Article Is Sponored By You! | Saturday, February 3, 2007 by Salman Siddiqui | Comments
I am now blogging on my self hosted blog CompuWorld and started another blog of mine the Senorita

Microsoft and vulnerabilities have a relationship similar to a company boss and the subordinates. They hate each other but they cannot leave each other too. The fifth zero-day unpatched vulnerability has been confirmed by Microsoft.

Related Softwares:
Microsoft Office 2000, Microsoft Office XP, Microsoft Office 2003, and Microsoft Office 2004 for Mac are the softwares found vulnerable.

What can cause the vulnerability:
When a user opens a specially crafted Office file using a malformed string, it may corrupt system memory in such a way that an attacker could execute arbitrary code.

How can an attacker exploit the vulnerability:
An attacker can somehow request you to click on some link which will take them to attackers site to download some office document. Otherwise the office document could be sent via email. Downloading the office document to your machine would help attacker corrupt the system memory in such a way that it can gain access to your computer.

Workaround available:
Do not open or save Office files that you receive from un-trusted sources or that you receive unexpectedly from trusted sources. This vulnerability could be exploited when a user opens a specially crafted Office file.

Microsoft is developing a security update for Office that addresses this vulnerability. It should be available soon.

[Image Source]