We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

Microsoft urges Office users to block Flash Player attacks

Blocking tool will protect Excel 2007 and older

Microsoft is urging users of older Office suites to install and run a complicated tool to protect themselves against ongoing attacks exploiting an unpatched bug in Adobe's Flash Player.

"For users of Office prior to 2010, the Enhanced Mitigation Experience Toolkit (EMET) can help," said Andrew Roths and Chengyun Chu, a manager and security engineer respectively with the Microsoft Security Response Center (MSRC). "Turning on EMET for the core Office applications will enable a number of security protections called 'security mitigations'," the pair wrote in a post to the company's Security Research & Defense blog.

EMET is a tool designed for advanced users, primarily enterprise IT pros, that manually enables ASLR (address space layout randomisation) and DEP (data execution prevention) for specific applications. ASLR and DEP are two anti-exploit technologies included with Windows.

Last weel, Adobe confirmed that attackers were exploiting an unpatched bug in Flash Player by sending potential victims malicious Microsoft Excel documents.

Excel is the spreadsheet bundled with the Office suite.

According to Roths and Chu, Excel 2010, the version included with Office 2010, is not susceptible to the attacks now in circulation because that edition of the spreadsheet has DEP enabled. "The current attacks do not bypass DEP," they said.

Excel 2010 further protects users by isolating malicious files inside Office 2010's 'Protected View', a 'sandbox' that prevents attack code from escaping the application.

But people running older versions of Excel - including the versions in Office 2007 and 2003 - are not protected by DEP or Protected View.

Microsoft has recommended EMET before as a stop-gap defence when Adobe zero-days have hit the street. In September 2010, Microsoft told users to configure EMET to block attacks exploiting a then-unfixed flaw in Adobe Reader.

EMET 2.0 is a free download available from Microsoft's site. After downloading and installing EMET, users must manually configure the tool to add protection to Office's applications, Excel included, and perhaps their browser(s) as well.

Adobe plans to patch the Flash Player vulnerability sometime this week.

See also: Google first to patch Flash bug with Chrome update


IDG UK Sites

Best Black Friday 2014 tech deals: Get bargains on smartphones, tablets, laptops and more

IDG UK Sites

What the Internet of Things will look like in 2015: homes will get smarter, people might get fitter

IDG UK Sites

See how Trunk's animated ad helped Ade Edmondson plug The Car Buying Service

IDG UK Sites

Yosemite tips: Complete Guide to OS X Yosemite