[ news_security_news ] Another PowerPoint Flaw Discovered
SecurityProNews Staff Writer
2006-09-28
Insider Reports RSS Feed
Sophos warns of a recently discovered vulnerability in Microsoft PowerPoint. The flaw has yet to be patched, and could be used to run malicious code by hackers.
"It's been a bad few weeks for Microsoft on the security front. No sooner have they rushed to deal with a day zero vulnerability in the way their products handle Vector Markup Language than they discover an apparent problem with PowerPoint files," said Sophos senior technology consultant Graham Cluley.
Sophos writes:
In July, in a similar incident, Sophos reported how Chinese hackers were exploiting a different day zero vulnerability in Microsoft Powerpoint to install a keylogging Trojan horse.
Sophos recommends that companies protect their email gateways with a consolidated solution to defend against viruses, spyware and spam, as well as apply an email policy that filters unsolicited content at the gateway. Businesses should also secure their desktop and servers with automatically updated protection and firewalls.
"Hackers are showing increasing ingenuity in their attempts to break into innocent users' computers, and are hunting for bugs in commonly-used programs to exploit. PowerPoint is the standard business tool for presentations, underlining that all computer users need to be show great caution when handling unsolicited email attachments," said Cluley.
Details on the PowerPoint flaw can be found at Microsoft's website. The flaw exists on both Windows and Mac versions.
Tag: Sophos
Add to Del.icio.us | Digg | Yahoo! My Web | Furl
Get all the updates in RSS:
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|