AplusWebMaster
Topic Starter
FYI…
- http://www.symantec.com/enterprise/securit…d_software.html
September 3, 2006
"…In the past couple of days, we have seen samples of a trojan that exploits a previously unknown vulnerability in Microsoft's Office applications. This time it is in Microsoft Word 2000 running on Windows 2000. This trojan (detected.. as Trojan.MDropper.Q*) takes advantage of the vulnerability to drop another file onto the target computer. Detected as a trojan, this dropped file in turn drops another file, which turns out to be new variant of Backdoor.Femo**. As with other recent Office vulnerabilities, documents incorporating the exploit code must be opened with a vulnerable copy of Microsoft Word 2000 for it to work. As such, it makes the vulnerability unsuitable for the creation of self-replicating network worms… Until a vendor supplied patch is made available and then installed, users should follow safe computing practices and exercise extreme caution when opening unsolicited emails containing Microsoft Office documents."
* http://www.symantec.com/enterprise/securit…-090219-2855-99
** http://www.symantec.com/security_response/…-080521-2111-99
Also:
- http://isc.sans.org/diary.php?storyid=1669
- http://vil.mcafeesecurity.com/vil/content/v_119055.htm
- http://secunia.com/advisories/21735/
- http://www.symantec.com/enterprise/securit…d_software.html
September 3, 2006
"…In the past couple of days, we have seen samples of a trojan that exploits a previously unknown vulnerability in Microsoft's Office applications. This time it is in Microsoft Word 2000 running on Windows 2000. This trojan (detected.. as Trojan.MDropper.Q*) takes advantage of the vulnerability to drop another file onto the target computer. Detected as a trojan, this dropped file in turn drops another file, which turns out to be new variant of Backdoor.Femo**. As with other recent Office vulnerabilities, documents incorporating the exploit code must be opened with a vulnerable copy of Microsoft Word 2000 for it to work. As such, it makes the vulnerability unsuitable for the creation of self-replicating network worms… Until a vendor supplied patch is made available and then installed, users should follow safe computing practices and exercise extreme caution when opening unsolicited emails containing Microsoft Office documents."
* http://www.symantec.com/enterprise/securit…-090219-2855-99
** http://www.symantec.com/security_response/…-080521-2111-99
Also:
- http://isc.sans.org/diary.php?storyid=1669
- http://vil.mcafeesecurity.com/vil/content/v_119055.htm
- http://secunia.com/advisories/21735/