Microsoft fixes Word bug

Microsoft fixes Word bug

Following McAfee's report, security researchers from FireEye also confirmed that they've been aware of these attacks and exploit for several weeks and have coordinated disclosure with Microsoft. Most software vulnerabilities give attackers user level code execution capability. The attackers then spread the malware-infected documents via email. The risky malware exploits work reportedly on all Microsoft office versions and that includes the latest versions, the office 2016 that is now running on Windows 10. The earliest attack we have seen dates to late January.

FireEye said it has been working with Microsoft on the vulnerability for several weeks and had agreed not to publicly disclose it until a patch was released, but made a decision to reveal the details after McAfee published its post.

There is now no patch for this bug, however, Microsoft is expected to release a fix within its next round of security updates tomorrow.

'Meanwhile we encourage customers to practise safe computing habits online, including exercising caution before opening unknown files and not downloading content from untrusted sources to avoid this type of issue.

Install Microsoft's Enhanced Mitigation Experience Toolkit, a utility that helps control software functionality and prevent vulnerabilities being successfully exploited. The only solution is to download the security patch released overnight by Microsoft.

As soon as the file is opened, the PC downloads a file with HTML application, which enables the hackers to take over the victim's system entirely and access all its data.


He added that the successful exploit closes the bait Word document, and pops up a fake one to show the victim.

The two firms both indicate that the flaws are within Microsoft's Object, Linking and Embedding (OLE) technology.

So, if you receive a shady email message asking you to download the document and open it immediately. "New, exploitable vulnerabilities are often not readily available but, in this case, attackers obviously jumped at an opportunity to launch a large campaign".

Within Trust Center, enabling the GPO that uses File Block to block.rtf files, not even allowing for them to be opened in "Protected View". Due to the it being a logical bug, it can also navigate around any memory-based mitigations.

The only way to protect yourself, according to McAfee and FireEye, is to configure Office to use Protected View. Proofpoint also disclosed that the malware was called Dridex, a risky banking malware that exploits Microsoft Office and once the computer is infected, it steals banking information of the user.

Related News:

  • Madonna's Unsurprising Opinion On Kendall Jenner's Pepsi Ad

    Madonna's Unsurprising Opinion On Kendall Jenner's Pepsi Ad

    Taking a break from the limelight Kendall Jenner has chosen to spend her time with her family. The ad continues and the model takes off her wig and makeup and walks beside the protestors.
    Akzo Nobel Paints Itself in Corner in Elliott Fight

    Akzo Nobel Paints Itself in Corner in Elliott Fight

    McGarry said, adding that a higher offer would hinge on "collaborative, substantive" talks between the companies. It wasn't clear if Elliott's move would succeed even if the hedge fund could muster enough votes.
    Garcia wins 1st major title at the Masters

    Garcia wins 1st major title at the Masters

    While all eyes were on the struggles of Hoffman and Garcia's scrambling, Rose really wasn't noticed until he birdied 17 and 18. But it was the 11th hole where he three-putted from 5 feet, and a double bogey removed him from the list of viable contenders.
  • Palestinian factions vow to break up Badr group in Lebanon

    Palestinian factions vow to break up Badr group in Lebanon

    Medical sources told AFP that the clashes killed two people and wounded 21, with at least one member of the security force among the dead.

    Garcia beats Rose to claim Masters Green Jacket

    Garcia opened the back nine with two bogeys and trailed by two at the par-5 13th, where his drive landed under a bush. Open title as comfort; Fowler still needs a breakthrough. "Jose Maria's [note] was very special because he's my idol".
    Cotton dazzles as A's spoil Royals' home opener with 2-0 win

    Cotton dazzles as A's spoil Royals' home opener with 2-0 win

    Twice he helped the long-downtrodden Royals reach the World Series, beating the Mets in five games to win it in 2015. Yordano Ventura died in a traffic accident early Sunday, Jan. 22, 2017, in his native Dominican Republic.
  • Sessions visits US-Mexico border to push migrant crackdown

    He also said all 94 USA attorneys will be told to "make assault on federal officers a priority (for prosecution)". US attorney's offices will also crack down on individuals who illegally re-enter the USA without authorization.
    China's consumer inflation steady amid firming economy

    China's consumer inflation steady amid firming economy

    In March 2016, consumer price index (CPI)-based retail inflation grew 4.83 percent. Fuel pump prices were also dragging on CPI.
    After attack on Syria, Tillerson vows to defend innocents

    After attack on Syria, Tillerson vows to defend innocents

    Russian Foreign Ministry spokeswoman Maria Zakharova however said the visit was cancelled after it had been rescheduled. But there have been repeated allegations of chemical weapons use by the government since then.
  • Abe praises Trump's security commitment after call on Syria, North Korea

    Xi, for his part, said their delegations covered important topics and established a good friendship and working relationship. Tillerson said Trump and the Chinese president "had extensive discussions around the unsafe situation in North Korea".
    SJ Res. 34 to be signed by Trump: ends internet privacy guidelines

    SJ Res. 34 to be signed by Trump: ends internet privacy guidelines

    People are not even aware of how and when their data is being collected and shared with advertisers. The order is expected to be signed by President Donald Trump soon.
    Why Tesla, Inc. Shares Jumped Today

    Why Tesla, Inc. Shares Jumped Today

    In 1Q17, Tesla began ramping up its Fremont, California, facility to support Model 3 production, scheduled for later this year. Tesla expects to begin production in July on the Model 3, a US$35,000-lower-cost (NZ$50,000) alternative to its Model S.


Most liked

Google's Self-Driving Cars are Better, Uber Admits
District Judge William Alsup to block Uber's self-car driving expansion on the grounds that it hinges on a high-tech heist. Now, Waymo is trying to thwart that effort by persuading U.S.

Doctor Who stars give tour of TARDIS in behind-the-scenes clip
Two worlds collide when the Doctor meets Bill. " She is not afraid of things that happen to her or of what the Doctor shows". When she heard she got the role, she didn't quite believe it, noting: "it's probably one of the best jobs on television".

Yoweri Museveni Uganda arrests academic who criticised president's wife
Arguments over the mental application, which the government premised on a 1938 colonial era law , took all afternoon. Nyanzi may have inadvertently transformed this political virgin into a Ugandan Guevara like icon.

Gas prices on the rise
Combined with still-rising crude oil prices , US drivers are paying more at the pump and probably will be for several weeks. As of Friday, the USA had 672 oil rigs in operation, according to a weekly tally from energy company Baker Hughes.

Burger King's Whopper gets prank Wikipedia edits in ad gag
In a demo, the ad prompts a Google Home voice-activated speaker to start reading a description of the Whopper from Wikipedia . Consumers typically leave these devices on, meaning they could be triggered at any time with the correct words.

Baker praises 10-day DL change after Nats shelve Turner
Washington made the move retroactive to Sunday ahead of its series opener Monday against the St. Turner was replaced on the 25-man roster by outfielder Michael A.

Trump tells newspaper Obama aide might have broken the law
None of this, as far as anyone can legitimately tell so far, actually has anything with KremlinGate itself. "Yes, I think." The president did not specify what law he thinks Rice may have broken.

One For Arthur wins 170th Grand National
Cause of Causes, 16-1, finished second with Saint Are, 25-1, and 8-1 pre-race favourite Blaklion third and fourth respectively. He's improved every time". "This is a fairy tale but for excellent medical care I wouldn't have made it", said Fox, 24.

Coroner: London attacker killed by gunshot wound to chest
He then fatally stabbed police officer Keith Palmer while trying to enter Parliament before being shot dead by another officer. On Monday, the Met said Masood had a clear interest in terror and his methods echoed the rhetoric of ISIS leaders.

Maxine Waters: Bill O'Reilly 'needs to go to jail'
Ending O'Reilly's show without evidence his appeal is dwindling carries a risk: It could ignite a backlash among fans. It's essentially up to Rupert Murdoch and his sons to decide when or if O'Reilly has become a liability.

Martha Stewart dooms New York Yankees' ideal game with a single tweet
Gardner moved to the locker next to the entrance by showers, formerly occupied by Carlos Beltran and before that Jorge Posada. NOTES: Yankees C Gary Sanchez (strained right biceps), was slated for an MRI exam on Monday .

Bradley out of starting lineup for Red Sox, has MRI on knee
The flu hit the Red Sox hard, affecting Betts, Ramirez, and Holt. "I feel like I can move around pretty good", Bradley said. Shortstop Xander Bogaerts is expected to rejoin the team for Tuesday's game at Fenway Park against the Baltimore Orioles.

NASA astronaut and 2 Russian cosmonauts return to Earth
She already held records for the most time spent in space by a woman and for the most time spent spacewalking by a woman. NASA astronaut Jack Fischer and Fyodor Yurchikhin of Roscosmos are scheduled to launch for the ISS this coming April 20.

Man shocked to find hikers had fallen over edge
One had a Korean passport and the others were Korean Canadians. A cornice is an overhanging mass of ice created by high winds.

Her reaction was great
Tom Steinfort, a Weekend Today presenter, called the decision of "sacking someone for an innocuous mistake" an absolute disgrace. This treasure trove of bloopers is good for a laugh, and honestly it's surprising some of these didn't end with a firing.