IP: another MS office problem and MS hides it on their web page :-)

[Dave Farber <dave () farber net>]

As of the time of this posting , the ms home page certainly does not have
any eye catching pointer to the fix. Shame on them.

Dave

August 22, 2002

Microsoft Warns of Security Risk in Office Software
By REUTERS

Filed at 8:11 p.m. ET

SEATTLE (Reuters) - Microsoft Corp. (MSFT.O) said on Thursday that
``critical'' security lapses in its Office productivity suite software and
other programs put users at risk of having their files read by online
attackers.

The world's No. 1 software maker said that an attacker, using e-mail or a
Web page, could run commands on a user's system to run programs, alter data
and reformat the hard drive as well as view file and clipboard contents.

The glitch can be fixed by downloading a software patch from Microsoft's Web
site, www.microsoft.com, and in a bulletin the Redmond, Washington-based
company advised customers to install the patch immediately.

Programs vulnerable to such attacks include Microsoft Office 2000, Office
XP, Money 2002, Money 2003, Project 2002 as well as server software related
to such client software, Microsoft said.

Microsoft, shaken by break-ins to its system and vulnerabilities in its
software, launched a ``trustworthy computing'' campaign earlier this year to
improve the security of all of its software.

Since that initiative, which Chairman Bill Gates said had cost the company
$100 million so far this year, Microsoft has issued at least 30 security
bulletins for flaws in its software. 

For archives see:
http://www.interesting-people.org/archives/interesting-people/