PDA

Click to See Complete Forum and Search --> : macros bug


mildex
Oct 17th, 2003, 04:47 AM
What is the essence of MS Word bug Microsoft Security Bulletin MS03-035: Flaw in Microsoft Word Could Enable Macros to Run Automatically(827653)?
There are no details of bug nature in this bulletin, just general info. What's, in fact, is this Word macro malfunction itself?


mildex

si_the_geek
Oct 17th, 2003, 05:21 AM
They intentionally don't say, as not everyone will be protected (by any patches that may be available).

If they said what the issue was, then people would be able to take advantage of it on unpatched systems.

mildex
Oct 17th, 2003, 06:51 AM
It's clear.
But many bugs are spotted not written-up, due to lack of interest, time, or expertise. More correct and more prescient approach is the concept of full disclosure. In many cases it will not be clear that there is a problem until the exploit or description is finalized. The good idea is to help people who lack expertise, time, or information about how to bug do so.

mildex

si_the_geek
Oct 17th, 2003, 09:27 AM
I understand that more information could potentially be useful to advanced users, but it is always useful to any virus writers who are interested - as most people don't bother to patch their home computers, and are therefore still vunerable.