main

Of MOICE and Microsoft: Securing Office 2003

Daniel Fleshbourne   on 11 May 2007 - 09:15 · 1 comment & 1128 views

Advertisement (Why?)
Microsoft officials say plans are on the way for a weapon that can help protect Office 2003 from attacks, though users of even older versions of Office may find themselves left out in the cold. The company is developing a tool called MOICE (Microsoft Office Isolated Conversion Environment), which converts files from Office 2003 to the new Office 2007 Open XML format in a bid to strip exploits out of the file. Once a file has been cleansed of exploits, it can be opened as normal in Office 2003.

"One of the things we noticed is that when we converted an exploit document to the new Office 2007 'Metro' format, it would either fail the conversion [or] emit a nonexploitable file, or the converter itself would crash," Microsoft Senior Software Development Engineer David LeBlanc wrote in a recent blog post. "Thus," he continued later in the post, "if we could pre-process documents coming from untrusted sources from the older format to the new format, and then get an older version of Office to use its converter to read in the new file format, the customer is going to end up safer."

View: The full story
News source: eWeek

Post a comment · Send to friend Comments · There are 1 additional comments
#1 +Octol on 12 May 2007 - 20:45
[Deleted because of irrelevancy.]

Last edited by Octol on 12 May 2007 - 20:54

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)