Microsoft Word 2000 Security Update: Macro Vulnerability

Security patch for Word 2000.
Download

Microsoft Word 2000 Security Update: Macro Vulnerability Ranking & Summary

Advertisement

  • Rating:
  • License:
  • Update
  • Publisher Name:
  • Microsoft
  • Publisher web site:
  • http://www.microsoft.com/
  • Operating Systems:
  • Windows 98, Windows 95, Windows 2000, Windows NT
  • File Size:
  • 3.05MB

Microsoft Word 2000 Security Update: Macro Vulnerability Tags


Microsoft Word 2000 Security Update: Macro Vulnerability Description

From Microsoft: Word, like other members of the Office product family, provides a security mechanism that requires user's approval to run macros. By design, anytime a document is opened the user would be notified if the document contains macros. In addition, this mechanism checks secondary documents that the original document links to, such as templates, and warn if any of those contain macros. This feature works by scanning the document or template for the presence of macros, alerting the user of their presence, and then asking the user if he wants to allow the macros to run. By embedding a macro in a template, and providing another user with an RTF document that links to it, an attacker could cause a macro to run automatically when the RTF document was opened. The macro would be able to take any action that the user herself could take. This could include disabling the users Word security settings so that subsequently-opened Word documents would no longer be checked for macros.


Microsoft Word 2000 Security Update: Macro Vulnerability Related Software