Microsoft warns of Word security issue
Microsoft Corp. warned users Tuesday about a security hole in its Word software, though the bug appears to be mild.
The flaw concerns macros, small scripts that can be used in Word to automate or speed up a number of operations. Normally, when documents are opened, the word processing software checks them for macros and warns the user if any are present, offering the option to allow them to be run or not. Word also checks any documents that the first file links to for macros, including templates.
The flaw comes into play in the unlikely instance that a user opens an RTF (rich text format) file that references a template with a macro embedded in it, Microsoft said. In this situation, when the RTF is opened, a macro can be run without warning the user. Such a macro could make some changes to Word, including enabling macros, even if the user had previously turned them off, according to the company.
Because the flaw only affects Word 97 and higher, and then only RTF files linked to a template, not Word files or unlinked RTF files, the flaw appears to be minor. Microsoft has issued a patch to fix the bug.
Macros have long been the province of annoying, but usually not terribly destructive, viruses.
IDG News Service
Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.
Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.
Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.
Enterprise 2.0 Implementation
By Aaron C. Newman, Jeremy Thomas
Published by McGraw-Hill
Learn more!
Deploying Cisco Wide Area Application Services
By Zach Seils, Joel Christner
Published by Cisco Press
Learn more!
