Microsoft's attempts to protect against the growing range of attacks targeting unpatched flaws in its Office application suite are only likely to be partially effective, according to security experts.
The tool, Microsoft Office Isolated Conversion Environment (MOICE), is designed to protect against malformed Office 2003 documents that attempt to exploit 0-day vulnerabilities. The technology works by converting Office 2003 binary format files to Open XML format using Microsoft Office 2007 system converters. Microsoft claims three possible failsafe outcomes: successful conversion, failure to covert, or the converter (though not the underlying OS) crashes.
|