Bugtraq mailing list archives
word 97 macrovirus protection problem
From: thomas () 88 NET (thomas lakofski)
Date: Mon, 26 Jul 1999 22:37:53 +0000
hi, i recently noticed, while dealing with a macro virus going around my office (too new for latest av software), that word 97's 'macro virus protection' feature doesn't work when printing documents directly from explorer. normal scenario: 1) open document 2) word pops up macro warning dialog 3) click 'disable' 4) open visual basic editor and delete the module containing the virus but, if like i was, you're printing a few documents and one happens to have a virus: 1) select multiple documents 2) right click, select 'print' context menuitem 3) word opens each document sequentially and prints them, including the document with a virus in it. word doesn't ask about the macros in this document, just goes ahead and enables them anyway. 4) i now have a macro virus in my normal.dot, with no indication of ever having run a macro-containing file. [skip rant on stupid macro security model] regards, -thomas ...... [obligatory-useless-waste-of-bits-bit-goes-here] ultra-umbra-magic-crypto EF D8 33 68 B3 E3 E9 D2 C1 3E 51 22 8A AA 7B 98 supercomputer-AES-xspook
Current thread:
- (How) Does AntiSniff do what is claimed? Nick Lamb (Jul 24)
- Re: (How) Does AntiSniff do what is claimed? Paul Boyer (Jul 25)
- Re: (How) Does AntiSniff do what is claimed? Jon Marler (Jul 25)
- Re: (How) Does AntiSniff do what is claimed? David Luyer (Jul 26)
- Re: (How) Does AntiSniff do what is claimed? Trevor Schroeder (Jul 27)
- Re: (How) Does AntiSniff do what is claimed? Trevor Schroeder (Jul 25)
- Re: (How) Does AntiSniff do what is claimed? Ian Goldberg (Jul 26)
- word 97 macrovirus protection problem thomas lakofski (Jul 26)
- Re: word 97 macrovirus protection problem Emils Klotins (Jul 28)
- New ActiveX security problems in Windows 98 PCs David N. Murray (Jul 29)
- Alert: Microsoft's Phone Dialer contains a buffer overrun that allows execution of arbitary code Mnemonix (Jul 30)
- Linux 2.2.10 ipchains Advisory Thomas Lopatic (Jul 27)
- <Possible follow-ups>
- Re: (How) Does AntiSniff do what is claimed? der Mouse (Jul 26)
- Re: (How) Does AntiSniff do what is claimed? Dr. Mudge (Jul 27)