Hello Thomas!

On Saturday, June 04, 2005, 6:09 PM, you wrote:

MB>> I think Microsoft announced a patch to fix the macros vulnerability,
MB>> some time back.

> Macros are executable code (Visual Basic in Excel, I will assume it's
> the same in Word). That's not a vulnerability per se, it's the point
> of it. If someone wants to write malicious code, there is no MS patch
> that can prevent him from doing it - unless the patch disables macros
> altogether.

Here's what I was talking about:

http://support.microsoft.com/?kbid=824934
=====================================================================
SUMMARY
Microsoft has released an update to Microsoft Word 2002. This update
resolves a flaw in Word 2002 that could allow unsigned macros in
specially crafted documents to run automatically regardless of the
macro security level settings of the user. This Word 2002 update is
part of the continued effort by Microsoft to provide the latest
product updates to customers.

This article describes how to download and install the Word 2002
Security Patch: KB824934.
======================================================================

So, you're right. The patch only allows a warning to be issued.

> Are we OT yet?

I do verily believe so. CCing to TBOT, although I know you're probably
on your way to China by now. :)

-- 
Best regards,
Mary
The Bat! 3.5.25 on Windows XP 5.1 2600 Service Pack 2







________________________________________________
Current version is 3.5.0.17 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to