Microsoft releases two security patches

Microsoft has released patches for security holes in Word 97 and the Microsoft Forms version 2.0 ActiveX Control that made them vulnerable to potential hacker attacks, though no such instances of foul play have been reported, according to the company.

Word 97 warns users when a document is being opened that has macros; however, if the document has no macros but is linked to a template that does, there is no warning. A hacker could therefore create malicious code to potentially damage or obtain data on a user's computer when a Word document is opened from an e-mail attachment or at a World Wide Web site. The user wouldn't know that a macro -- possibly containing the miscreant's wayward code -- existed.

The Word 97 Template security patch adds a warning so that users know when they are launching a template containing a macro. The patch does not disable use of templates or macros on templates, Microsoft said in a statement today, recommending that all users download the patch at http://officeupdate.microsoft.com/downloaddetails/wd97sp.htmThe Microsoft Forms 2.0 Control allows developers to create custom dialogue boxes. It is part of Visual Basic for Applications installed with Office 97, Project 98 and other options of the Visual Basic development system 5.0, as well as in third-party applications that license Visual Basic for Applications. The Forms 2.0 Control is vulnerable to a hacker reading or exporting text on a user clipboard when the user is at a Web site created by a hacker or when the user opens an HTML-based e-mail written by the hacker.

Users who do not know if they have the control on their computers can follow steps posted at http://officeupdate.microsoft.com/downloaddetails/fm2paste.htmThe Microsoft Security Advisor Web site is at http://www.microsoft.com/security

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Nancy Weil

PC World
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?