Home » Tech

Microsoft Office vulnerabilities mean no .doc is safe

13 April, 2017, 02:20 | Author: Abraham Jackson
  • Microsoft Office vulnerabilities mean no .doc is safe

The emails sent by attackers contained a Microsoft Word RTF (Rich Text Format) document and were sent by addresses using the recipient's domain name. Most software vulnerabilities give attackers user level code execution capability. In other words, the system was compromised even if the user was presented a dialog about the document containing "links that may refer to other files". This activity has been going on for months and affects all versions of the MS Office package, including Office 2016 that also came with the Windows 10 Operating System.

The vulnerability comes from Windows Object Linking and Embedding feature, according to FireEye.

McAfee reported seeing instances of the bug in the wild, typically in attacks from March and April but occasionally as far back as November.

Microsoft, which according to McAfee has known of the remote-code vulnerability since January, has yet to issue any sort of public advisory.

Microsoft also released additional updates for vulnerabilities in its products overnight, as part of its monthly security updates. "According to our tests, this active attack can not bypass the Office Protected View, so we suggest everyone ensure that Office Protected View is enabled, said McAfee".

Li said it had informed Microsoft Security Response Center of the attacks and vulnerability.

The malware can be disguised as important files or documents sent over email, meaning a student's homework or an office presentation could be harboring the next attack.

5 children taken to hospital after accident at Taylors Church
Five children were hospitalized in a bouncy house accident Saturday at a church carnival in Taylors, South Carolina. Strong winds in SC caused two inflatable bounce houses to go airborne Saturday with five children still inside.

Police track leads in search for Wisconsin gun theft suspect
The newly-released photos of Jakubowski were taken on the evening of Tuesday, April 4th at the Armageddon Gun Shop in Janesville. Police on Sunday also released a social media video that they said depicts Jakubowski's sending a package to Trump.

House fails to pass budget for the first time in decades
Celia Israel (D-Austin), would prohibit using state money to build a border wall in Big Bend State Park. But several amendments would force House Republicans to take a vote on "school choice" issues.

He added that the successful exploit closes the bait Word document, and pops up a fake one to show the victim.

Two cybersecurity firms have uncovered vulnerabilities in Microsoft Office files that have allowed hackers to install malware through Word documents.

So, if you receive a shady email message asking you to download the document and open it immediately.

And that's the reason this vulnerability is more unsafe that many others, because the victim won't even know that the payload is being installed on their system.

The nature of the attack means it can bypass most memory-based mitigations designed by Microsoft. Protected View is normally used by default when opening a file delivered in an email or downloaded from the web, disabling everything but the essentials of its content to maximise security.

"We suggest everyone ensure that Office Protected View is enabled", said Li.

Details of the vulnerability were first released by McAfee and FireEye over the weekend.

Recommended:

  • Trump tells newspaper Obama aide might have broken the law

    Trump said the chemical weapons attack in Syria was "an affront to humanity", and it "crossed a lot of lines" for him. The press conference came after Nunes reviewed classified documents that he says he got from a secret source.
    Impeachment hearings set to begin for Alabama governor

    Impeachment hearings set to begin for Alabama governor

    Bentley's candor in investigative efforts", said Jack Sharman, Special Counsel for the House Judiciary Committee. The commission has referred the case to a prosecutor to decide whether Bentley should face criminal charges.
    Syrian chemical attack victim hits out CNN journalist

    Syrian chemical attack victim hits out CNN journalist

    I didn't see you raising your voice against President Obama's inaction in Syria that...made us refugees get kicked out of Syria. McMaster said Thursday when asked about the refugee policy. "Cruise missiles alone are not a solution", said Rep.
  • Uganda charges, jails academic for insulting the president

    Uganda charges, jails academic for insulting the president

    Nyanzi are yet another clear indicator that those who express critical views of the government can face its wrath", Burnett said. Instead, government lawyers applied to have Nyanzi undergo a court-ordered mental evaluation before she could even take pleas.
    Inflation remains at above-target 2.3%

    Inflation remains at above-target 2.3%

    Clothing and footwear price tags were also on the rise, climbing by 2% over the period in contrast to a 1% jump previous year . The growth rate, nearly on par with market expectations, quickened from an increase of 0.8 percent in February.

    Trump lauds 'outstanding' relationship with China's Xi after talks

    North Korea's pursuit of a nuclear missile capable of striking the United States is the most pressing issue in the relationship. The two sides had "a real commitment to work together to see if this can be resolved in a peaceful way", Tillerson said.
  • Palestinian force deploys in Lebanon camp, ending clashes

    Palestinian force deploys in Lebanon camp, ending clashes

    The camp was established in 1948 to host Palestinians displaced by Israeli forces during the establishment of Israel. Palestinians in Lebanon are prohibited from working in professional jobs and have few legal protections in Lebanon.
    Lawmakers urge Trump to work with them on Syria

    Lawmakers urge Trump to work with them on Syria

    Trump took to Twitter on Saturday morning to say he was honored to have President Xi Jinping during the two-day summit in Mar-a-Lago.

    Baby giraffe facts and what to expect from April the giraffe's newborn

    YouTube briefly removed the live stream, then restored it - and a pregnant animal star was born . All we've been told is that she could go into labor at any moment.
  • Janet Jackson splits from husband months after birth of son

    Janet Jackson splits from husband months after birth of son

    Jackson, 50, is worth an estimated $175 million, while her estranged husband, 42, has an estimated net worth of $1 billion. Clap ending for the love story between Janet Jackson and Wissam Al Mana .
    Doctor Who stars give tour of TARDIS in behind-the-scenes clip

    Doctor Who stars give tour of TARDIS in behind-the-scenes clip

    Doctor Who returns to BBC One at 7.20pm on Saturday 15 April with The Pilot, the first episode of a brand new twelve-part series.
    Jay Z Pulls Catalog From Spotify

    Jay Z Pulls Catalog From Spotify

    Spotify didn't say if Jay Z's decision was based on friction between Tidal and other streaming music services. Last year, his 2001 album " The Blueprint " was also removed from all streaming services other than Tidal.


Popular

Elliott leads investors against Akzo Nobel supervisory chair
PPG Chief Executive Michael McGarry said last week that the company isn't ruling out a sweetened offer or a hostile bid for Akzo. If Akzo stuck to its "inexplicable" refusal, "Elliott intends to use its recourse to the Dutch Courts", the fund manager added.

Bombardment in Iraq's Mosul takes heavy toll on civilians
Meanwhile, Rasoul said that the military operations in west Mosul are going on according to the command's plan. While Mosul is the centre of operations for ISIS in Iraq, the group also controls Qaim, Tal Afar and Hawija.

See how Democrats vs. Republicans react to controversial Pepsi ad
Meanwhile, as per Toronto Sun , the actors in the commercial said that most of the extras in the ad weren't even from the US. And 32 percent of Americans said the ad made them more likely to buy Pepsi products, versus 20 percent who were less likely.

Twitter pulls lawsuit after US government backs down
On April 7, 2017, counsel for Defendants from the Department of Justice contacted counsel for Twitter, to advise that U.S. Customs and Border Protection has withdrawn the summons and that the summons no longer has any force or effect.

Burger King's Whopper gets prank Wikipedia edits in ad gag
Contrary to reports claiming Google has disabled the functionality, we were just able to summon the Assistant by playing the ad. You don't want to create a situation where consumers are developing resentment".

Celebrations as Kinross trained horse wins Grand National
Cause Of Causes came second, Saint Are was third, in fourth place was Blaklion, and finishing fifth was Gas Line Boy. I felt we'd done everything we possibly could to get this horse here.

US launches cruise missiles on Syrian airfield
Downing Street says it is discussing measures to exert "greater pressure" on the Syrian regime and those who support it. But political experts say with the show of force is risky, with Russian Federation backing Assad.

Mourinho explains why De Gea didn't play against Sunderland
Manchester United's evergreen striker believes he is football's answer to the fictional character who reverses the ageing process. But Ibrahimovic added: "It was an important three points, especially after games when we haven't got what we wanted".

US, Mexico, and Canada to make joint bid for 2026 World Cup
Europe and Asia will be the next two to host a World Cup , which means they won't be able to bid for the next tournaments. Trump has also signed an executive order barring travelers from six Muslim-majority nations from entering the U.S.

Gunman killed after 'shooting two people at an Equinox'
Witnesses identified the gunman as a 33-year-old trainer, and those wounded were the general manager and a trainer, it said. Wilson had apparently been let go by the Equinox fitness center in Coral Gables but showed up Saturday in his uniform.