AplusWebMaster
Topic Starter
FYI…
- http://preview.tinyurl.com/2q4xop
October 11, 2007 (Computerworld) - Security researchers spotted an attack yesterday that exploits a vulnerability in Microsoft Word patched just the day before. On Wednesday, Symantec Corp. reported it had obtained a suspicious Word document that crashed every version of the application except the newest, Word 2007, when opened. After it examined the document, Symantec found that the document included shell code and three pieces of malware. Among its more surprising findings: Symantec found that the document had been created with the edition of Word included with Office for Mac 2004. On Tuesday, Microsoft Corp. issued a patch that closed a critical vulnerability in multiple editions of the popular word processor, including Word 2000, Word XP and Word for the Mac. Symantec put the two together. "Taking a closer look at that vulnerability, we confirmed that this document was in fact exploiting the same vulnerability"… Updates to the Windows versions of Word can be obtained via Microsoft Update or Office Update…"
- http://preview.tinyurl.com/2saysc
October 10, 2007 (Symantec Security Response Weblog)
> http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3899
> http://cwe.mitre.org/data/definitions/94.html
- http://preview.tinyurl.com/2q4xop
October 11, 2007 (Computerworld) - Security researchers spotted an attack yesterday that exploits a vulnerability in Microsoft Word patched just the day before. On Wednesday, Symantec Corp. reported it had obtained a suspicious Word document that crashed every version of the application except the newest, Word 2007, when opened. After it examined the document, Symantec found that the document included shell code and three pieces of malware. Among its more surprising findings: Symantec found that the document had been created with the edition of Word included with Office for Mac 2004. On Tuesday, Microsoft Corp. issued a patch that closed a critical vulnerability in multiple editions of the popular word processor, including Word 2000, Word XP and Word for the Mac. Symantec put the two together. "Taking a closer look at that vulnerability, we confirmed that this document was in fact exploiting the same vulnerability"… Updates to the Windows versions of Word can be obtained via Microsoft Update or Office Update…"
- http://preview.tinyurl.com/2saysc
October 10, 2007 (Symantec Security Response Weblog)
> http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3899
> http://cwe.mitre.org/data/definitions/94.html