Disagreement Over '0-Day' Word Worm
609514
Last weekend's disclosure of an alleged security vulnerability in Microsoft Word 2000, exploited by a new version of an old worm, is raising questions over what constitutes the severity of an exploit. Is it the degree to which we know about it, or the number of systems out there it could possibly hurt?
604494
MicroWorld Software has cautioned Internet users about a new malicious worm known as the W32/Zafi-D. According to the antivirus and content security software provider, W32/Zafi-D behaves in a typical worm manner.
409923
Swiss cheese IM client menaced by umpteenth zero day bug Trouble came in pairs for instant messenger users this week with the disclosure of unpatched flaws in chat software from both AOL and Yahoo!â¦
222372
A new variant of the Internet worm MyDoom - Mydoom.Y - has anti-virus vendors puzzled. Not because they can&#39;t do anything about it but because it comes along with a description of itself.
192196
bug text As worms proliferated through the first half of the year, attacks gained in sophistication. Also: A start-up fights zombies.
605561
NEW YORK: At least one new variant of a worm spread rapidly from Asia and Europe to US computers on Friday morning, filling up people&#39;s e-mail accounts, but otherwise causing little apparent damage.
557341
(InfoWorld) - There's now one more reason to be careful about opening Microsoft Office attachments. Microsoft warned Tuesday of a new, unpatched memory corruption error in its word-processing software, and said that it was investigating reports of "limited" attacks that exploit the problem. The bug can be exploited by adding a string of characters in a Word file that can corrupt the PC's memory and allow the attacker to run unauthorized software on the system, Microsoft wrote in a security advisory . The bug affects many versions of the software, including Word 2000, 2002, and 2003, the Word Viewer 2003 and several versions of Microsoft Works. It is rated 'critical' by the FrSIRT Web site, which compiles a list of software vulnerabilities. As automatic security updates have become commonplace, attackers have focused more on developing attacks that leverage this kind of unpatched hole in the software, sometimes called 0day attacks. This trend has forced Microsoft to produce a growing number of software updates in recent months. In particular, hackers turned their attention to Microsoft's Office products, which some researchers consider to be a more fruitful source of bugs than the Windows operating system. "Cybercriminals know that 0days are very valuable and can be used to make lots of money," said Cesar Cerrudo, chief executive officer of security research firm Argeniss, in Parana, Argentina. These vulnerabilities can be exploited to install spyware or dangerous Trojan horse programs, or to add the victim's computer to a network of compromised PCs, called a botnet, which can then be used to send out spam or attack other systems, he said. Microsoft's next set of security updates is due to be released on December 12.
236348
At least one new variant of a worm spread rapidly from Asia and Europe to US computers, filling up people&#39;s email accounts, but otherwise causing little apparent damage.
576746
A Chinese hacker arrested just days ago will be allowed to release a fix for the worm that he helped write. But a security researcher questioned the wisdom of the move.
424958
No end in sight Just when the world thought it was safe to resume use of Microsoft Office, there's word that a new zero-day attack may be targeting the popular productivity package. Like so many of the others, it's capable of all kinds of mischief, including the execution of malicious code on a victim's machine.â¦
711528
A new worm has been discovered in the wild that&#39;s not just settling for invading users&#39; PCs - it wants to invade their homes too.
7285
According to an advisory published on security firm Secuniaâs website, a critical vulnerability exists in Microsoft Word, which can be exploited by a malicious code to cause a DoS (Denial of Service) and potentially compromise a user&#39;s system.
494010
Tycho: There were some truly unconscionable spelling issues with the 1.0 version of that last post. I think I got them all. But I am afraid to look.(CW)TB
648630
AMSTERDAM  - A new computer worm emerged on Tuesday which broke the speed record from the announcement of a security vulnerability in Microsoft's Internet Explorer to a full-blown virus that spreads in the wild.
295779
Blog: Low ransom request and a self-termination date on the code suggest this is a test attack.
16963
The first cross-platform worm specifically tailored for the open-source OpenOffice.org and StarOffice productivity suites has raised a few hackles in open source circles, since it appears to tarnish the suite&#39;s reputation for security.
584261
Until the vulnerability is patched, users should avoid opening unexpected Word documents.