Feeds

Microsoft releases security tool for Office 2003

Defangs Office doc, spreads the XML love

Choosing a cloud hosting partner with confidence

Microsoft has released a tool designed to protect Office 2003 users from malicious payloads surreptitiously dropped into innocent-looking office files - an attack tactic that has grown in popularity over the past year.

Called MOICE - short for Microsoft Office Isolated Conversion Environment - the enhancement converts Word, Excel and PowerPoint files to their counterparts in the OpenXML format. In the process, which takes place in a quarantined, sandbox environment, elements that could have been used to compromise a machine are effectively stripped out, Microsoft says.

MOICE is designed to be used alongside another tool known as File Block, which enables administrators to set up group policies that prevent users from accessing certain types of Office documents. File types that have been blacklisted are simply converted to corresponding files in the more benign XML format.

"During the conversion of an unsafe file, MOICE will fail to convert the file, create a safe version of the file, or the converter itself will crash," an advisory on Microsoft's site reads. "The mere process of conversion and achieving one of three possible outcomes is what protects customers."

Both protections already work out of the box with Office 2007. Office 2003 users who want to use them must first install the Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats. Organizations using versions prior to Office 2003 are out of luck. Microsoft has said it plans to "backport" some but not all of Office 2007's security improvements in the upcoming release of Service Pack 3 for Office 2003.

Microsoft is wise to extend these protections to Office 2003, which remains widely used by businesses and government and military agencies. Since the beginning of last year, Microsoft has issued at least 24 security advisories concerning Office 2003, according to Secunia. Office 2007, by contrast, has been affected by advisories just twice. MOICE and File Block alone can't provide all the protections found in Office 2007, but Microsoft is betting they can help contain damage from some of the nastiest exploits that might otherwise wreak havoc on organizations that have yet to upgrade.

Secunia data shows the growing popularity of Office as an attack vector. Of the 33 advisories issued over the past three years, 19 of them came in the past year. ®

MOICE, which is available free, works with the .doc, .ppt, .pot, .pps, .xls, .xlt and .xla file formats. ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
Why did it take antivirus giants YEARS to drill into super-scary Regin? Symantec responds...
FYI this isn't just going to target Windows, Linux and OS X fans
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
You stupid BRICK! PCs running Avast AV can't handle Windows fixes
Fix issued, fingers pointed, forums in flames
prev story

Whitepapers

Designing and building an open ITOA architecture
Learn about a new IT data taxonomy defined by the four data sources of IT visibility: wire, machine, agent, and synthetic data sets.
Why CIOs should rethink endpoint data protection in the age of mobility
Assessing trends in data protection, specifically with respect to mobile devices, BYOD, and remote employees.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.