We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,108 News Articles

Microsoft warns of Word exploit

Unpatched hole threatens Office users

Microsoft has warned of a new, unpatched memory corruption error in its word-processing software, and said that it’s investigating reports of "limited" attacks that exploit the problem.

The bug can be exploited by adding a string of characters in a Word file that can corrupt the PC's memory and allow the attacker to run unauthorised software on the system, Microsoft wrote in a security advisory. The bug affects many versions of the software, including Word 2000, 2002, and 2003, the Word Viewer 2003 and several versions of Microsoft Works. It is [rated 'critical' by the FrSIRT website, which compiles a list of software vulnerabilities.

As automatic security updates have become commonplace, attackers have focused on developing attacks that use this kind of unpatched hole, sometimes called zero day attacks. This trend has forced Microsoft to produce a growing number of software updates in recent months.

In particular, hackers turned their attention to Microsoft's Office products, which some researchers consider to be a more fruitful source of bugs than the Windows operating system.

"Cyber criminals know that zero days are very vulnerable and can be used to make lots of money," said Cesar Cerrudo, chief executive officer of security research firm Argeniss. These vulnerabilities can be exploited to install spyware or dangerous Trojan horse programs, or to add the victim's computer to a network of compromised PCs, called a botnet, which can then be used to send out spam or attack other systems, he said.

Microsoft's next set of security updates is due to be released on December 12.


IDG UK Sites

Windows 9 release date, price, features: Microsoft teases new OS ahead of 30 September unveiling

IDG UK Sites

From the iPhone 6 to the iWatch and a new Apple TV we look at the products Apple is set to launch...

IDG UK Sites

September 2014 creative trends: 5 things you must see

IDG UK Sites

What to expect from Apple in autumn/winter 2014: iPhone 6, iPhone Air, iWatch, iPad 6, new Apple...