Microsoft
Four bulletins in Microsoft's Security Update addressed 12 vulnerabilities in Office

Office fixes dominate Microsoft update

Patch Tuesday turns into a busy day at the Office

Written by Shaun Nichols in California

Vulnerabilities in Office applications have been a favourite attack method among cyber-crooks

Dave Marcus Security research and communications manager, McAfee

Fixes for Microsoft's Office productivity suite dominated this month's Patch Tuesday release.

The four bulletins in yesterday's Security Update addressed 12 vulnerabilities in the popular software.

Each of the bulletins fix vulnerabilities which could allow an attacker to remotely execute code on the target system. Microsoft has rated all four as 'critical', the highest of its four alert levels.

The bulletins address flaws in Outlook, Excel and Office web components. The update applies to Office XP, 2000, 2003 and 2007. Mac versions of Office 2004 and 2008 were also updated, each receiving fixes rated 'important'.

Windows XP and Windows Vista were not affected by the monthly update.

Dave Marcus, security research and communications manager at McAfee, said that the update addresses an important attack vector.

"Vulnerabilities in Office applications have been a favourite attack method among cyber-crooks, especially in stealthy attacks that seek to steal high-value intellectual property," he said.

"Trojan attacks often use rigged Office files that exploit vulnerabilities in the productivity suite."

Further reading

Microsoft cuts Xbox 360 prices in Europe

Arcade model now cheaper than a Wii   More...

Sun and Microsoft widen alliance

Former rivals open interoperability centre   More...

Microsoft objects to Vista Capable class-action

Email disclosures causing embarrassment   More...

Microsoft acquires U-Prove technology

Software ramps up online privacy tools   More...

Related articles

Microsoft patches eight 'critical' holes

August update covers four web browsing risks   More...

Windows 2000 flaw highlights slow Patch Tuesday

Vista and XP spared from most dangerous vulnerabilities   More...

Eight April patches from Microsoft

Five critical fixes in this month's update   More...

Microsoft pushes out 17 security fixes

'Critical' patches for Windows, Office and Internet Explorer   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

16 May 2008

2.97 MBXP on OLPC, broken dreams and Yahoo fights back More...

15 May 2008

3.28 MBDark fibre, mobile TV and solar power More...

14 May 2008

2.66 MBOnline inequality, mobile thumbprints and corporate raids More...

Poll

HOME WORKING

HOME WORKING

Do you let any or all of your employees work from home?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

OLPC

OLPC to ship with Windows XP

Microsoft teams up with One Laptop per Child project   More...

The Sims

The Sims goes flat-pack with Ikea

Virtual world gets Swedish wood   More...

Advertisement

Microsoft-Yahoo

Yahoo board fights back at Icahn

Investor accused of 'significant misunderstanding' in Microsoft saga   More...

MySpace

Woman charged over MySpace suicide

Lori Drew indicted on federal charges   More...

Advertisement