Posted on 10/01/2005 6:49:31 AM PDT by Panerai
A new Trojan horse exploits an unpatched flaw in Microsoft Office and could let an attacker commandeer vulnerable computers, security experts have warned.
The malicious code takes advantage of a flaw in Microsoft's Jet Database Engine, a lightweight database used in the company's Office productivity software. The security hole was reported to Microsoft in April, but the company has yet to provide a fix for the problem.
"Microsoft is aware that a Trojan recently released into the wild may be exploiting a publicly reported vulnerability in Microsoft Office," a company representative said in a statement sent via e-mail on Friday. The software maker is investigating the issue and will take "appropriate action," the representative said.
The Trojan horse arrives in the guise of a Microsoft Access file, security software maker Symantec said in an advisory. When run on a vulnerable system, it would give a remote attacker full access to a compromised computer, Symantec said. The company calls the pest "Backdoor.Hesive" and notes that it is not widespread.
Although exploits had already been released in April when HexView publicly reported the flaw, the Trojan is believed to be the first actual threat to take advantage of the security hole. Security monitoring firm Secunia rates the issue "highly critical," one notch below its most serious rating.
(Excerpt) Read more at beta.news.com.com ...
Any lock can be picked, just like all software has holes. In fact, there are more holes in Unix/Linux products reported every single week.
http://www.us-cert.gov/cas/bulletins/SB05-271.html
I'm not going to bicker semantics with you because it's pointless.
Any lock can be picked, but a defective lock is easier to break than one that works as designed. I didn't mention Linux and I don't use it.
Well according to that link from US-Cert, Unix/Linux products are about 10x more defective.
Yawn. Irrelevant to my point.
Microsoft AND the hackers are to blame for any damage resulting from this flaw.
If a professional thief can open a defective lock, you can be damn sure the maker of the defective lock will be liable.
Trying to insist you'd just as quickly condemn the platforms with 10x as many holes is laughable too.
Never did it.
Sure not taking your word on it. Proof? Precidence?
Never did it.
I know, everyone else always gets a pass with you guys, no matter how much more "defective" their software is.
reported to Microsoft in April, but the company has yet to provide a fix for the problem.
Oh wait its exactly like that..
I know, everyone else always gets a pass with you guys, no matter how much more "defective" their software is.
"you guys?" Just the one of me here, a Windows user. Sorry to deprive you of the only thing you have to say.
Does the security of Microsoft products REALLY rely on the charity of hackers to privately report the defects they find in Microsoft software?
Good Lord, it's worse than I thought. I'm glad I don't use the affected product.
Experts estimate the damage of viruses to be in the billions of dollars.
http://news.com.com/2100-1001_3-240112.html?part=msnbc-cnet
Why wasn't Microsoft responsible to pay for any of it? Not even a single penny? Could it be that most rational people rightfully blame the hackers for these attacks? I'd say yes, obviously.
The whole, some hacker did not tell MS first argument might hold weight if this hole was not revealed nearly 6 months ago! Six months to fix a pretty serious bug, should be long enough..
The hackers should have privately submitted it, so that users weren't exposed. You'd obviously rather lob rotten tomatoes at one of the victims - in this case Microsoft - instead.
LOL
They are a victim, which is why they've never been held liable for any of these damages, your whines about it notwithstanding.
The wahhhhhhmbulance will be by shortly.
You're the whiner, not me. I'm just pointing out the facts, which are, MS isn't liable, and neither are lock companies which was your supposed analogy. The crooks are, which for some reason you seem very interested in protecting.
Things must be getting rough in Redmond. You Microsoft lackeys are doing less strutting these days and more whining.
Too bad so sad.
Pointing out what's right and what's wrong isn't whining. Whining is what you do when it's demonstrated, which is all you've done.
LOL
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.