Mac Word hack for MS Word Vista News Discuss Mac Word hack for MS Word in the Windows Vista forums; Exploit Wednesday follows Patch Tuesday Word update Yesterday, October 11, 2007, The trend for exploiting vulnerabilities around the same time as Microsoft's monthly Patch Tuesday update continues. Hackers have ...

[Snuffy]

Exploit Wednesday follows Patch Tuesday Word update
Yesterday, October 11, 2007,
The trend for exploiting vulnerabilities around the same time as Microsoft's monthly Patch Tuesday update continues.

Hackers have crafted a new Word exploit based on a memory corruption vulnerability addressed by Microsoft on Tuesday. The flaw was already exploited prior to the release of the fix, according to Microsoft.

Until this week the critical flaw had only been exploited in targeted attacks, but it's now getting wider play.

Symantec reports that the vulnerability is now being exploited in more widespread attacks. Malformed Word documents doing the rounds contain shell code and three pieces of malware. The malware package is unusual in that it was created using the Word for Macintosh format instead of the standard Windows (OLE) format.

http://www.theregister.co.uk/2007/10...oit_wednesday/

[Snuffy]

Word for Mac Exploit in the Wild
Yesterday, October 12, 2007,
Symantec is warning about a new security exploit making the rounds that takes advantage of a flaw in Office 2004 for Mac. A maliciously crafted Word file could lead to malware and rootkits being installed on a vulnerable system, including Windows PCs running older versions of Office.
<|>
Word for Mac Exploit in the Wild
By BetaNews Staff, BetaNews
October 12, 2007, 2:51 PM
Symantec is warning about a new security exploit making the rounds that takes advantage of a flaw in Office 2004 for Mac. A maliciously crafted Word file could lead to malware and rootkits being installed on a vulnerable system, including Windows PCs running older versions of Office. The issue was patched on Tuesday by Microsoft.
"It seems that the trend for exploiting vulnerabilities around the same time as Patch Tuesday continues. Microsoft themselves confirm in their advisory that they have seen this issue exploited in the wild," Symantec said in a blog posting. "The good news is that the default configuration in Microsoft Office 2007 and Office 2003, Service Pack 3 will not allow you to open some older Office file formats, including Office for Macintosh documents."