On MovieTome: Highest Metascore Streaming Movies
BNET Business Network:
BNET
TechRepublic
ZDNet
TalkBack 14 of 32:
Next »
« Previous
Safety in Numbers?
This exploit of OfficeXP, version 3 was reported to Microsoft by George Guninski in March of 2002. As nearly as I can tell, to date Microsoft has only done a partial fix, and the vulnerability still exists, according to Mr. Guninski:

http://www.guninski.com/m$oxp-2.html

Typical interaction, here.

Mr. Guninski details the exploit to MS, MS produces a patch that only heads off part of the exploit, claims the rest of it can't do any serious harm. Mr. Guninski then rapidly turns around and produces code which demonstrates that the MS patch doesn't entirely fix the problem and that MS software folks don't know what the hell they're talking about. Microsoft's response: silence. As you read his site, this appears to be the norm rather than the exception.

Probably, you can find safety in numbers and play the odds that your company won't be hit by an exploit like this, but I for one don't like to live that way. I'm running WordPerfect Office on one Windows box and OpenOffice on the rest, but will probably sooner rather than later standardize across my company on OpenOffice or StarOffice.

Whichever version of Office gets released simultaneously with Longhorn might be a totally different story, but having been a reader of Mr. Guninski's site for a while, I'm perfectly afraid of current versions of Office.
Posted by: Yen_z   Posted on: 11/02/03 You are currently: a Guest | Members login | Terms of Use
Reply to Story Reply to Message

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

I'm a big fan of Microsoft Office.  GraysonPeddie | 10/31/03
bargain  stephen732@... | 10/31/03
The only reason I pirated Office is because...  Jomo_z | 11/01/03
Lame Excuse  John L. Ries | 11/01/03
not quite  stephen732@... | 11/01/03
lame excuse  lotta_anger | 11/02/03
Not a bad reason (if it was true)  nomadh | 11/03/03
Another challenge to the crown...  Mike Cox | 10/31/03
Re: Another challenge to the crown...  mbratch | 11/01/03
Re: Another challenge to the crown...  Martin Marvinski | 11/01/03
I don't think so  NoB$ | 11/01/03
Sounds like a "Script Kiddies" dream - - - - and a hacker's delight....  Plain Logic | 11/01/03
Layered products provide security  BarbarianHorde | 11/03/03
Safety in Numbers?  Yen_z | 11/02/03
Why not trademark...???  richdave | 11/03/03
Gee, another suite to compete against  FilledOut | 10/31/03
Competition is always a good thing!  zoltrac | 10/31/03
Hey, whatever works.  John Zern | 10/31/03
no access  stephen732@... | 10/31/03
Yes Access  John Zern | 10/31/03
No Access  CooCooCaChoo | 11/01/03
Absolutely Access  wolf_z | 11/01/03
It is a toy  richdave | 11/03/03
They all work.......  zoltrac | 11/01/03
So  NoB$ | 11/01/03
You heard it hear first  lmaxwell | 10/31/03
excuse me  richdave | 11/03/03
Uh, Is it better than open office?  notbilln | 11/01/03
Students and Teachers Edition  ctk76 | 11/01/03
A product that cheap spells I want in the market  rcovolo | 11/01/03
Earth calling rcovolo  doubledekker | 11/03/03
It Just Doesn't Work  masterblaster2 | 11/03/03

What do you think?

SponsoredWhite Papers, Webcasts, and Downloads

advertisement
advertisement

IT Solutions for 2010

  • Get cost-effective strategies and roadmaps on the most important issues facing IT leaders in 2010! Learn how to easily cut costs and deliver greater efficiency starting with your database, IT compliance management and data center. Visit the IT Leaders Dashboard. Visit the IT Leaders Dashboard.
  • Read about top issues IT decision-makers face every day, plus get cost effective solutions to real life IT problems. Oracle Topline