Microsoft has released a pair of tools that help protect computers from Office 2003 files containing malicious software code. Both tools, which were announced earlier this month, are designed to help defend against Office "zero-day" attacks, which take advantage of vulnerabilities before a patch is released by Microsoft.

The first tool to defend against these attacks, called Microsoft Office Isolated Conversion Environment, is meant to protect users running Office 2003 and Office 2007. MOICE works by converting Office 2003 binary files to the Office Open XML format used by 2007 Office, blocking out malicious code in the process. This conversion takes place inside an "isolated environment," which Microsoft said prevents malicious code from running on the computer.

The second tool, called File Block Functionality for Microsoft Office 2003 and the 2007 Microsoft Office system, gives system administrators the ability to define which file types can and cannot be opened by users. This gives administrators the ability to block access to certain files when a specific threat arises, Microsoft said. Microsoft detailed MOICE and File Blocker in a security advisory, recommending that both tools be used to protect against malicious Office documents. The advisory includes links to the necessary files and detailed installation instructions.

Link: Microsoft Security Advisory (937696)
News source: InfoWorld



There are 3 additional comments
Advertisement
Quote this comment Reply to this comment #1 Posted by Express on 22 May 2007 - 15:15
Where can I download these tools?
Quote this comment Reply to this comment #2 Posted by bmaher on 22 May 2007 - 16:54
Quote -
Microsoft has released a pair of tools that help protect computers from Office 2003


Sorry, i had to :p
Quote this comment Reply to this comment #3 Posted by shirike on 22 May 2007 - 18:29
MOISE

http://www.microsoft.com/downloads/details...;displaylang=en


File Block Functionality is pre-installed in Excel, Word and Powerpoint 2007 but you need to read MS articles


http://support.microsoft.com/kb/922849
http://support.microsoft.com/kb/922848
and
http://support.microsoft.com/kb/922847


for instructions on how to enable them on each application.
[1]

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.


Scroll to the Top
....
My Preferences
....
Communicating with server
Loading
Please Wait...
....
Loading
 X 
....