Posted on 02/07/2002 7:51:03 AM PST by TexRef
Users of Microsoft Office on the Macintosh may find that their product serial number is a tool for hackers.
Microsoft issued a security warning Wednesday saying that programmers with malicious intent could use Mac Office v. X's product identifier to shut down one or more copies of the application running on a network or connected to the Internet.
Although the Redmond, Wash.-based software titan characterized the security threat as low, the timing and unusual nature of the problem--an exploit involving an anti-piracy mechanism--could give it another black eye. The company has taken a drubbing recently from analysts and customers for security glitches involving the Excel and PowerPoint applications, secure digital content, the Windows XP operating system, and the Internet Explorer browser, among other products.
Those problems have prompted Microsoft to go beyond simply issuing warnings and patches. Last month, Chairman Bill Gates sent an e-mail to the company's 47,000 employees, urging them to make security a top priority. The company has even stopped product development for a month to conduct security education and a review of products.
Office v. X, Microsoft's flagship product for Apple Computer's Macintosh, was released in November. With the new version, Microsoft introduced an anti-piracy mechanism that checks for duplicate serial numbers running on a network. The mechanism will not allow two copies of the product with the same serial number to run simultaneously on the same network.
In the security notice, Microsoft described the problem as a "flaw" in the product identification checker, which "doesn't correctly handle a particular type of malformed announcement." When that happens, the feature fails, shutting down Mac Office.
"An attacker could use this vulnerability to cause other users' Office applications to fail, with the loss of any unsaved data," Microsoft's security notice warned. "An attacker could craft and send this packet to a victim's machine directly, by using the machine's IP address. Or, he could send this same directive to a broadcast and multicast domain and attack all affected machines."
Companies using standard firewall procedures could prevent problems from the outside, although malicious code could still get through by other means, such as an improperly configured wireless network.
Microsoft emphasized that hackers could not create, delete or modify Office documents, although unsaved data would be lost during an unexpected shutdown. The company has issued a security patch to correct the problem.
The vulnerability does not affect Office XP, which uses a different anti-piracy mechanism. Rather than check for serial numbers, Office XP uses a product activation feature. A person must activate the product, which essentially "locks" the software to the particular hardware configuration.
Nice.
This is really a smal security issue. You can't steal data or compromise the MacOS X system with this. The most that can happen is that someone can cause Microsoft Office to quit unexpectedly. The only thing you would lose is the data in memory when the app quits. If you use the ipfw to block the M$ Office ports, this would never happen in the first place.
This problem has to do 100% with Microsoft Office's anti-piracy system which scans local nets for another copy running with the same serial number.
I mean, has the "blame the victim" culture snuck into conservatism like a virus in the night?
Are women blamed for their rape because they wear makeup? Are the victims of terrorists blamed because they are rich Americans? Are makers of armored vests blamed because they don't protect your head?
Just curious.
The only one I've had any problem with in StarOffice 6 beta is .pps (slideshow). Hopefully that will be fixed in StarOffice 6 final.
Something about the pot, the kettle and the color black comes to mind.
We need something separate from the OS maker and something that is easy to use and converts MS files well (at least until it kills Office :)
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.