Big Microsoft Office vulnerability discovered

[Bradley Prior]

Big Microsoft Office vulnerability discovered

Mimecast Research Labs has uncovered a significant bug in Microsoft Office products, which has since been patched by Microsoft.

In a blog post, Mimecast explains that the vulnerability is likely to have caused the “widespread, unintended leakage of sensitive information in millions of previously created Office files”.

 

[sajunky]

Ooops, someone found it - "We had to fix another backdoor".

 

[j4ck455]

However, Mimecast recommends removing or re-saving files created by vulnerable versions of Office as these files may still be compromised.

Even after updating to apply the patch, all old MSO documents have to be opened and saved using the patched version?

Is that to reduce the risk on unpatched PCs in case the old files end up on an unpatched PC, or am I missing the purpose of this seemingly pointless advice?

 

[ToxicBunny]

Ooops, someone found it - "We had to fix another backdoor".

This was just a decoy... The real backdoor is still in place. And they've put them into Linux as well now since they contribute to the kernel

 

[Sinbad]

Even after updating to apply the patch, all old MSO documents have to be opened and saved using the patched version?

Is that to reduce the risk on unpatched PCs in case the old files end up on an unpatched PC, or am I missing the purpose of this seemingly pointless advice?

The leaked memory data is stored inside the old documents. Resaving them with a patched version cleans that up.

 

[w1z4rd]

Kinda glad Im using Libre atm.

 

[sajunky]

This was just a decoy... The real backdoor is still in place. And they've put them into Linux as well now since they contribute to the kernel

Canonical? Before they put Ubuntu on the wrong GUI path, now they are openly colaborating with Microsoft. But it is not about Linux kernel itself, as an open source project, it makes things difficult to hide.

 

[ToxicBunny]

Canonical? Before they put Ubuntu on the wrong GUI path, now they are openly colaborating with Microsoft. But it is not about Linux kernel itself, as an open source project, it makes things difficult to hide.

Did I mention Canonical at all?

Difficult to hide is not a problem when you have as many good devs as MS...

 

[access]

like terabytes of office files that need to be saved over again ...right lol

 

[ekske1]

massive.

 

[kianm]

Geeze, open and re-save every doc!