| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Trojan rides in on unpatched Office flaw | |
|
||
| Time: 00:13 EST/05:13 GMT | News Source: CNET | Posted By: Robert Stein | ||
|
A new Trojan horse exploits an unpatched flaw in Microsoft Office and could let an attacker commandeer vulnerable computers, security experts have warned. The malicious code takes advantage of a flaw in Microsoft's Jet Database Engine, a lightweight database used in the company's Office productivity software. The security hole was reported to Microsoft in April, but the company has yet to provide a fix for the problem. "Microsoft is aware that a Trojan recently released into the wild may be exploiting a publicly reported vulnerability in Microsoft Office," a company representative said in a statement sent via e-mail on Friday. The software maker is investigating the issue and will take "appropriate action," the representative said. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 151 Last | Next |
The time now is
9:53:31 PM
ET.
Any comment problems? E-mail us |
| #1 By 15406 (216.191.227.68) at 10/3/2005 9:18:52 AM |
|
Too bad they didn't decide to take appropriate action back when the flaw was reported 6 months ago.
|
| #2 By 32132 (207.81.85.238) at 10/3/2005 10:38:38 PM |
| Its a good thing that Outlook 2000 SP2 and above don't allow the receipt or mailling of mdb files. |
| #3 By 12071 (203.185.215.149) at 10/4/2005 1:12:15 AM |
| #1 Appropriate Action means sitting on bugs for as long as possible until there is enough PR pressure to release a fix. This way the next time Symantec (or someone else using their methods) runs a report based on vendor-acknowledged exploits Microsoft will come out looking really good! |
| #4 By 32132 (207.81.85.238) at 10/4/2005 10:55:05 AM |
|
#3 On the other hand Chris, a person who does not have his head up his *ss (unlike you) might realize that if someone unknown to you mails you an mdb file, and you stupidly open it, you could be toast already without there being a vulnerability in JET.
Thats why Outlook has a long list of dangerous file types it does not allow you to email or receive as email. |
| #5 By 12071 (203.185.215.149) at 10/4/2005 8:03:19 PM |
|
#4 "might realize that if someone unknown to you mails you an mdb file"
Wow, it's a good thing that all the Outlook users know better than to blindly click on whatever email and attachment they might receive! If they didn't can you imagine how many worms/trojans/viruses/etc. there would be! Search Google to find out how many there were before Microsoft's brilliant innovation to ban certain file extensions (note: file extensions NOT mime-types!). You're always so right Parkkker, how do you do it? |
| #6 By 32132 (207.81.85.238) at 10/4/2005 9:03:16 PM |
|
#5 "Wow, it's a good thing that all the Outlook users know better than to blindly click on whatever email and attachment they might receive!"
I think its a good thing that Microsoft enhanced the security of Outlook 5 years ago to prevent clicking on dangerous attachments. And also added that feature to Outlook Express. I'm not sure I understand your point? Do you think it was a bad thing? Are you a bigger moron than I already thought you were? |
| #7 By 12071 (203.185.215.149) at 10/4/2005 11:50:41 PM |
|
#6 "I think its a good thing that Microsoft enhanced the security of Outlook 5 years ago to prevent clicking on dangerous attachments."
I'm glad that you think that it's a good thing for Microsoft to have done something to protect all those users that have their "head up his *ss" that don't know about mdb files and/or their potential to cause harm. Based on your comment in #4 and past history - there are a lot of people with their "head up his *ss"! "I'm not sure I understand your point?" Reading and comprehension go a long way - learn it! "Do you think it was a bad thing?" Bad? Not necessarily bad but definitely poor. If we take aside the issue of Microsoft's use of file extensions vs mime-types for a second the solution to ban all potentially harmful file formats is a knee-jerk reaction that followed the "we don't know how to secure the product" thought. Now people have to zip up those "potentially harmful" files to get around Microsoft's brilliant innovation put in to protect all those people with their "head up his *ss"! "Are you a bigger moron than I already thought you were?" No-one cares what you think. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 151 Last | Next |
The time now is
9:53:31 PM
ET.
Any comment problems? E-mail us |
