Microsoft Patches New Office Flaw
632610
Monthly set of security patches does not include a fix for Word bug that was identified last week.
590852
Software giant confirms that a critical vulnerability exists in Microsoft Office 2000.
197018
An unpatched security vulnerability in popular older versions of Microsoft Word poses a severe threat to users, security reporting firm Secunia warned yesterday.
461708
Microsoft published on Tuesday a patch for a major security flaw in its software&#39;s handling of the JPEG graphics format and urged customers to use a new tool to locate the many applications that are vulnerable.
266105
Microsoft fixes a critical flaw in the Windows operating system that could be used by criminals to create a self-copying PC worm attack.
51437
eEye Digital Security has alerted Microsoft's bug team about a remote code vulnerabilityin Office 2007. Microsoft confirmed that  it's looking into the report.
86995
Microsoft Corp. on Tuesday issued a trio of software updates to fix security holes in Windows computers, including one flaw that hackers are using to infiltrate PCs equipped with a massive security upgrade the company released just five months ago.
252060
Microsoft blasts revelation of vulnerability in Word application.
170602
PowerPoint threat to PCs and Macs Business users are being encouraged to be more cautious when opening PowerPoint files following the discovery of an as yet unpatched flaw in Microsoft's office application.â¦
697888
"Extremely critical flaw" in Microsoft Word 2000, which has no released patch, could lead to remote execution of code.
146436
(InfoWorld) - Microsoft's Word and Office programs have been targeted again, with the company warning that hackers may already exploiting a new vulnerability found in the applications. The warning comes just afterÂ the company issued fixesÂ for 20 other bugs in its products on Tuesday, including six for Word. The latest problem affects Office 2000 and Office XP, Microsoft said in a security advisory on Wednesday. An attacker could create a specially-crafted Word document that, if opened, could allow them to control a victim's computer remotely. As usual it advised great caution when opening unsolicited attachments. Microsoft said it had received reports of "very limited, targeted" attacks. Danish security vendor SecuniaÂ ranked the problem as "extremely critical." The emergence of a security bug so soon after Microsoft's scheduled patch release follows a familiar pattern by hackers, who want to maximize the amount of time they have to take advantage of a vulnerability, said Thomas Kristensen, Secunia's chief technical officer. Microsoft rarely diverts from its patch schedule, set for the second Tuesday of the month, although it said it would in this case if it considers it necessary. Office applications such as Word are "low-hanging fruit" for hackers, since the programs haven't been audited as much as some others, such as Internet Explorer, Kristensen said. The hackers find a vulnerability by manipulating a document and testing how Word reads it. In this case, a modified document can corrupt system memory in a way that allows the attacker to execute code on the machine remotely. As well as sending the document via email, the hacker could embed it in a Web page and try to lure users into visiting that page. "Attacking using this vector is fairly easy," Kristensen said. However, new security features in Windows Vista, released to the general public last month, may prevent similar types of attack, so hackers may be making an extra effort to exploit them while they can, he said. Â
734469
(InfoWorld) - With hackers exploiting unpatched vulnerabilities in its Windows and Office software, Microsoft plans to issue 11 security updates next Tuesday. Some of the Office and Windows updates will be for critical flaws that could be exploited by attackers with no action on the part of users. Six of the patches will be for Windows, and four of them will be for Office, MicrosoftÂ said Thursday in a note on its Web site. The 11th update will be for a flaw in Microsoft's .Net framework, which is considered less severe than the critical Windows and Office patches. Hackers have been keeping Microsoft's Security Response Center busy this past month. Microsoft generally issues its security patches on the second Tuesday of every month, but last weekÂ the company was forced to issue a rare, "out-of-cycle" security patchÂ after criminals began exploiting a flaw in Internet Explorer's VML (Vector Markup Language) rendering engine. And security experts have also warned of cyberattacks based on unpatched flaws in PowerPoint, Word 2000 and in an ActiveX control (called WebViewFolderIcon) used by the Windows' graphical user interface software. The WebViewFolderIcon flaw will be patched Tuesday, Microsoft said. Attacks that take advantage of this flaw have been seen on the Internet, the SANS Internet Storm CenterÂ warned earlier this week. Â
219303
Microsoft is warning of a new unpatched vulnerability in its Word software.
321788
Microsoft on Tuesday issued a patch for an earlier discovered flaw in Visual Studio 2005, while yet another cumulative patch for Internet Explorer was released, as well as one for a vulnerability within the Windows Media Format.
555449
Microsoft this week released a patch to fix an important vulnerability in Internet Explorer, even as a new worm that took advantage of an as-yet-unpatched hole in the Web browser spread.
198560
Microsoft on Thursday updated a security bulletin issued Tuesday to include the Mac version of its ubiquitous Office suite. Three Excel vulnerabilities that affect Windows also pose a risk to Office 2004 for Mac, and the company has issued a downloadable patch.
338092
Microsoft is working to patch a security flaw in its word-processing software that is being used in targeted cyberattacks.