by 2 Cylivers
Researchers at eEye Digital Security have found a vulnerability in Microsoft Office Publisher 2007, which could be exploited to let an outsider run code on a compromised PC.
I don't get it. Microsoft spends close to 5 billion (yes! you heard that right) in developing Vista operating system and office 2007 and still they screw up.
It's no wonder when eEye's chief executive, Ross Brown said "We were surprised we could find a flaw so quickly (after Office 2007 launched) and one that was part of their core products" An attacker could create a malicious publisher file, he said. Once the recipient opens the file, he or she could find the system infected and susceptible to a remote attack.Researchers at eEye used a standard process of code auditing in discovering the vulnerabilities, Brown added. He noted that Microsoft either did not do a "good job" with its code auditing, or it may not have had enough people working on such a task.
Yeah! right! Microsoft was "under funded" at 5 billion dollars Or is it that complacency has creeped into microsoft so much that it's just not possible for them to either innovate and even "repackage" their offerings time and again without bugs.
Microsoft said it is investigating eEye's report of a possible vulnerability in Publisher 2007 and will provide users with additional guidance if necessary. Do I hear a "service pack", Steve?
I don't get it. Microsoft spends close to 5 billion (yes! you heard that right) in developing Vista operating system and office 2007 and still they screw up.
It's no wonder when eEye's chief executive, Ross Brown said "We were surprised we could find a flaw so quickly (after Office 2007 launched) and one that was part of their core products" An attacker could create a malicious publisher file, he said. Once the recipient opens the file, he or she could find the system infected and susceptible to a remote attack.Researchers at eEye used a standard process of code auditing in discovering the vulnerabilities, Brown added. He noted that Microsoft either did not do a "good job" with its code auditing, or it may not have had enough people working on such a task.
Yeah! right! Microsoft was "under funded" at 5 billion dollars Or is it that complacency has creeped into microsoft so much that it's just not possible for them to either innovate and even "repackage" their offerings time and again without bugs.
Microsoft said it is investigating eEye's report of a possible vulnerability in Publisher 2007 and will provide users with additional guidance if necessary. Do I hear a "service pack", Steve?
Comments
- dturner, Jun 08, 2008 at 01:54 PM PDT said:
What do you expect from Microsoft!
