Microsoft fixes Word bug

New Zero-day exploit use Word to hack your PC

Following McAfee's report, security researchers from FireEye also confirmed that they've been aware of these attacks and exploit for several weeks and have coordinated disclosure with Microsoft. Most software vulnerabilities give attackers user level code execution capability. The attackers then spread the malware-infected documents via email. The risky malware exploits work reportedly on all Microsoft office versions and that includes the latest versions, the office 2016 that is now running on Windows 10. The earliest attack we have seen dates to late January.

FireEye said it has been working with Microsoft on the vulnerability for several weeks and had agreed not to publicly disclose it until a patch was released, but made a decision to reveal the details after McAfee published its post.

There is now no patch for this bug, however, Microsoft is expected to release a fix within its next round of security updates tomorrow.

'Meanwhile we encourage customers to practise safe computing habits online, including exercising caution before opening unknown files and not downloading content from untrusted sources to avoid this type of issue.

Install Microsoft's Enhanced Mitigation Experience Toolkit, a utility that helps control software functionality and prevent vulnerabilities being successfully exploited. The only solution is to download the security patch released overnight by Microsoft.

As soon as the file is opened, the PC downloads a file with HTML application, which enables the hackers to take over the victim's system entirely and access all its data.


He added that the successful exploit closes the bait Word document, and pops up a fake one to show the victim.

The two firms both indicate that the flaws are within Microsoft's Object, Linking and Embedding (OLE) technology.

So, if you receive a shady email message asking you to download the document and open it immediately. "New, exploitable vulnerabilities are often not readily available but, in this case, attackers obviously jumped at an opportunity to launch a large campaign".

Within Trust Center, enabling the GPO that uses File Block to block.rtf files, not even allowing for them to be opened in "Protected View". Due to the it being a logical bug, it can also navigate around any memory-based mitigations.

The only way to protect yourself, according to McAfee and FireEye, is to configure Office to use Protected View. Proofpoint also disclosed that the malware was called Dridex, a risky banking malware that exploits Microsoft Office and once the computer is infected, it steals banking information of the user.

Related News:

  • NASA astronaut and 2 Russian cosmonauts return to Earth

    NASA astronaut and 2 Russian cosmonauts return to Earth

    She already held records for the most time spent in space by a woman and for the most time spent spacewalking by a woman. NASA astronaut Jack Fischer and Fyodor Yurchikhin of Roscosmos are scheduled to launch for the ISS this coming April 20.
    SJ Res. 34 to be signed by Trump: ends internet privacy guidelines

    SJ Res. 34 to be signed by Trump: ends internet privacy guidelines

    People are not even aware of how and when their data is being collected and shared with advertisers. The order is expected to be signed by President Donald Trump soon.
    Why Tesla, Inc. Shares Jumped Today

    Why Tesla, Inc. Shares Jumped Today

    In 1Q17, Tesla began ramping up its Fremont, California, facility to support Model 3 production, scheduled for later this year. Tesla expects to begin production in July on the Model 3, a US$35,000-lower-cost (NZ$50,000) alternative to its Model S.
  • China's consumer inflation steady amid firming economy

    China's consumer inflation steady amid firming economy

    In March 2016, consumer price index (CPI)-based retail inflation grew 4.83 percent. Fuel pump prices were also dragging on CPI.

    Garcia beats Rose to claim Masters Green Jacket

    Garcia opened the back nine with two bogeys and trailed by two at the par-5 13th, where his drive landed under a bush. Open title as comfort; Fowler still needs a breakthrough. "Jose Maria's [note] was very special because he's my idol".
    Man shocked to find hikers had fallen over edge

    Man shocked to find hikers had fallen over edge

    One had a Korean passport and the others were Korean Canadians. A cornice is an overhanging mass of ice created by high winds.
  • Trump says North Atlantic Treaty Organisation  'no longer obsolete'

    Trump says North Atlantic Treaty Organisation 'no longer obsolete'

    President Donald Trump said North Korea "is looking for trouble" Tuesday, warning China that the U.S. I was very disappointed to see - it's disappointing no matter who does it.
    Yoweri Museveni Uganda arrests academic who criticised president's wife

    Yoweri Museveni Uganda arrests academic who criticised president's wife

    Arguments over the mental application, which the government premised on a 1938 colonial era law , took all afternoon. Nyanzi may have inadvertently transformed this political virgin into a Ugandan Guevara like icon.

    North Korean murder suspects sent home with body of victim

    The late Kim Jong-il's eldest son was passed over for the leadership and was living outside North Korea at the time of his death. But now it appears to have acceded to North Korea's wishes to get those Malaysians released, our correspondent adds.
  • Eating dog meat banned in Taiwan

    Eating dog meat banned in Taiwan

    The revised Animal Protection Act imposes hefty fine of up to Taiwan $250,000 (£6,500) for anyone found breaching the new law. Dogs for sale are kept in a cage on the day of a dog meat festival in China's Yulin town on June 22, 2015.

    South Korean Supporters of Arrested Ex-president to Protest

    A warrant for Park's arrest was issued in the early hours of the morning following a court hearing that lasted almost nine hours. One of the privileges Park will have to give up if arrested will be getting her hair coiffed in the chignon style.
    Martha Stewart dooms New York Yankees' ideal  game with a single tweet

    Martha Stewart dooms New York Yankees' ideal game with a single tweet

    Gardner moved to the locker next to the entrance by showers, formerly occupied by Carlos Beltran and before that Jorge Posada. NOTES: Yankees C Gary Sanchez (strained right biceps), was slated for an MRI exam on Monday .


Most liked

Madonna's Unsurprising Opinion On Kendall Jenner's Pepsi Ad
Taking a break from the limelight Kendall Jenner has chosen to spend her time with her family. The ad continues and the model takes off her wig and makeup and walks beside the protestors.

Twitter drops lawsuit against United States government
Customs and Border Protection (CBP) has withdrawn its March 13 summons, "and that the summons no longer has any force or effect". Twitter filed the suit on Thursday with a United States district court in San Francisco , Efe news reported.

Akzo Nobel Paints Itself in Corner in Elliott Fight
McGarry said, adding that a higher offer would hinge on "collaborative, substantive" talks between the companies. It wasn't clear if Elliott's move would succeed even if the hedge fund could muster enough votes.

Doctor Who stars give tour of TARDIS in behind-the-scenes clip
Two worlds collide when the Doctor meets Bill. " She is not afraid of things that happen to her or of what the Doctor shows". When she heard she got the role, she didn't quite believe it, noting: "it's probably one of the best jobs on television".

5 children injured after bounce house, inflatable slide go airborne
Elvis German, who was working nearby, said one house became caught on power lines and was about 20 feet in the air, FOX6 writes. German also indicated that when it fell back down, it made an audible noise and the power momentarily failed.

Janet Jackson 'moved out of marital home a month ago'
Page Six , meanwhile, reports that Jackson made a decision to take a walk when Al Mana became too controlling . Jackson has had two marriages in the past, reports the Daily Mail .

Cotton dazzles as A's spoil Royals' home opener with 2-0 win
Twice he helped the long-downtrodden Royals reach the World Series, beating the Mets in five games to win it in 2015. Yordano Ventura died in a traffic accident early Sunday, Jan. 22, 2017, in his native Dominican Republic.

Abe praises Trump's security commitment after call on Syria, North Korea
Xi, for his part, said their delegations covered important topics and established a good friendship and working relationship. Tillerson said Trump and the Chinese president "had extensive discussions around the unsafe situation in North Korea".

Trump tells newspaper Obama aide might have broken the law
None of this, as far as anyone can legitimately tell so far, actually has anything with KremlinGate itself. "Yes, I think." The president did not specify what law he thinks Rice may have broken.

Trump's grandchildren sing for Chinese president in Mandarin
After their first face-to-face at the Mar-a-Lago resort, he trumpeted they had developed an " outstanding " relationship. However, when the two presidents met in Florida during the early hours in China , there was nearly no reporting at all.

Comcast says it will not sell customer browsing histories
According to tech experts, self-regulation may not protect consumer privacy at all . The ruling side of the Republicans sitting in the U.S.

Maxine Waters: Bill O'Reilly 'needs to go to jail'
Ending O'Reilly's show without evidence his appeal is dwindling carries a risk: It could ignite a backlash among fans. It's essentially up to Rupert Murdoch and his sons to decide when or if O'Reilly has become a liability.

Don't blame us for Super Rugby team loss, say Kiwis
The drastic restructure comes amid financial losses and widespread fan discontent over the confusing and unbalanced competition. The Australian Rugby Union will now let the two endangered franchises plead their case for survival.

Aspen Skiing Co, KSL Capital to buy Intrawest for about $1.5 bln
Intrawest owns resorts in Colorado, Vermont, West Virginia, and in the Canadian provinces of Quebec and Ontario. Intrawest has been paring down its resort holdings since selling California's Mammoth Mountain in 2005.

Passenger says man dragged off United Airlines plane was doctor
They were not popular among the passengers, he recalled. "They were saying, 'You should be ashamed to work for this company"'. In a 52-second video , police officers in plain clothes are seen talking to a man sitting in the window seat of the plane.