Microsoft Corp warned on Wednesday that users of its Office software were at risk of having their computers taken over by an attacker unless they applied a patch to correct the problem.
The world's largest software maker said a "critical" flaw in its Visual Basic for Applications software, used to develop applications for Windows and Office, could enable a malicious programmer to create documents that would launch attacks on unsuspecting users.
Microsoft has vowed to improve security and reliability of its software, which has been hit by several high-profile flaws this year. The Slammer worm nearly brought the Internet to a halt in January while the Blaster worm and its variants crippled hundreds of thousands of computers in August.
The flaw exploited by Blaster first appeared in a Microsoft security bulletin in mid-July, which was followed by the release of the worm sometime during the first week of August.
While experts said that it is difficult to determine whether the Blaster worm was created in response to the July security bulletin, they added that there was a slight risk that the latest disclosure could spawn a new virus.
Redmond, Washington-based Microsoft urged users in a security bulletin to apply the software fix.
At risk were recent versions of Microsoft's Access, Excel, PowerPoint, Publisher, Visio, Word and Works applications, which are part of the Office family of software used in a range of tasks such as creating databases, documents, spreadsheets and presentations as well as publishing documents and Web pages. Some applications from Microsoft's Great Plains business software division were also affected, Microsoft said.
A user could trigger an attack by opening a document for any program that contains Visual Basic components, the company said.
Experts said that any virus that exploits the Visual Basic flaw was unlikely to cause major damage.
"There are a number of factors that minimize the risk in this case," said Oliver Friedrichs, a senior manager at computer security and services provider Symantec Corp.
"You need to open a document that someone sends to you, where with Blaster you simply had to be on the Internet," he said.
NO-LIMITS PARTNERSHIP: ‘The bottom line’ is that if the US were to have a conflict with China or Russia it would likely open up a second front with the other, a US senator said Beijing and Moscow could cooperate in a conflict over Taiwan, the top US intelligence chief told the US Senate this week. “We see China and Russia, for the first time, exercising together in relation to Taiwan and recognizing that this is a place where China definitely wants Russia to be working with them, and we see no reason why they wouldn’t,” US Director of National Intelligence Avril Haines told a US Senate Committee on Armed Services hearing on Thursday. US Senator Mike Rounds asked Haines about such a potential scenario. He also asked US Defense Intelligence Agency Director Lieutenant General Jeffrey Kruse
INSPIRING: Taiwan has been a model in the Asia-Pacific region with its democratic transition, free and fair elections and open society, the vice president-elect said Taiwan can play a leadership role in the Asia-Pacific region, vice president-elect Hsiao Bi-khim (蕭美琴) told a forum in Taipei yesterday, highlighting the nation’s resilience in the face of geopolitical challenges. “Not only can Taiwan help, but Taiwan can lead ... not only can Taiwan play a leadership role, but Taiwan’s leadership is important to the world,” Hsiao told the annual forum hosted by the Center for Asia-Pacific Resilience and Innovation think tank. Hsiao thanked Taiwan’s international friends for their long-term support, citing the example of US President Joe Biden last month signing into law a bill to provide aid to Taiwan,
China’s intrusive and territorial claims in the Indo-Pacific region are “illegal, coercive, aggressive and deceptive,” new US Indo-Pacific Commander Admiral Samuel Paparo said on Friday, adding that he would continue working with allies and partners to keep the area free and open. Paparo made the remarks at a change-of-command ceremony at Joint Base Pearl Harbor-Hickam in Hawaii, where he took over the command from Admiral John Aquilino. “Our world faces a complex problem set in the troubling actions of the People’s Republic of China [PRC] and its rapid buildup of forces. We must be ready to answer the PRC’s increasingly intrusive and
STATE OF THE NATION: The legislature should invite the president to deliver an address every year, the TPP said, adding that Lai should also have to answer legislators’ questions The Chinese Nationalist Party (KMT) yesterday proposed inviting president-elect William Lai (賴清德) to make a historic first state of the nation address at the legislature following his inauguration on May 20. Lai is expected to face many domestic and international challenges, and should clarify his intended policies with the public’s representatives, KMT caucus secretary-general Hung Meng-kai (洪孟楷) said when making the proposal at a meeting of the legislature’s Procedure Committee. The committee voted to add the item to the agenda for Friday, along with another similar proposal put forward by the Taiwan People’s Party (TPP). The invitation is in line with Article 15-2