Jump to content


No Fixes For Microsoft Word Zero-day Flaws


1 reply to this topic

#1 OFFLINE   Humpty

    Super Hero

  • Members
  • PipPipPipPipPip
  • 2,125 posts

Posted 10 January 2007 - 10:08 PM

Quote:

Microsoft has released high-priority fixes for serious vulnerabilities in its Outlook and Excel applications, but there are no patches in the January batch for known Microsoft Word flaws that are currently under attack.

The Redmond, Wash., software maker released four bulletins with patches for a total of 10 vulnerabilities, most rated "critical," but there is no sign of fixes for the known code-execution Word bugs that have been exploited in zero-day attacks since December 2006.

Microsoft originally planned to ship eight bulletins this month but four were pulled at the eleventh hour, suggesting that there were problems with the quality of the updates. One of the bulletins that was withdrawn was slated to address Microsoft Office flaws, but it is not clear if Word fixes were included.

eweek article

#2 OFFLINE   Andavari

    Captain Spectacular

  • Moderators
  • 13,327 posts
  • Gender:Male
  • Location:Shadow Moses

Posted 10 January 2007 - 10:25 PM

I can confirm that I received no MS Word updates when Automatic Updates was triggered today (one day late?).
Complexity of incoherent design.