moice

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Attackers pounce on Microsoft PowerPoint zero-day

Attackers pounce on Microsoft PowerPoint zero-dayVulnerability patch cycle unacceptableMS would be better spending the $600M advertising (See Mary's blog) waste of money on strengthening the threat response team as several months for an already exploited hole is insane and does not do their reputation any favours.Eg: For Excel 2000...

Tags: SECURITY, Microsoft Corp., Microsoft Office, MOICE, Microsoft PowerPoint, user right

Discussion threads 2009-04-03

A (Microsoft) Codename a day: Wringer

The Microsoft MOICE project isn't new, but the codename and its origins were new to me. MOICE is designed to "wring out" malicious content from Office documents. by Mary Jo Foley

Tags: Codename, Microsoft Corp., Attack, MOICE, Microsoft Office, Security, Office Suites, Software, Mary Jo Foley

Blog posts 2008-08-29

Microsoft releases Office exploit isolation tool

Microsoft has released a file conversion tool that stops exploits rigged into .doc, .xls and .ppt files from infecting Office 2003 users.The tool, called MOICE Microsoft Office Isolated Conversion Environment, can be used in tandem with Group Policy settings to convert documents in legacy (.doc) formats to OpenXML...

Tags: Zero-day attacks, Vulnerability research, Viruses and Worms, Spyware and Adware, Spam and Phishing, Responsible disclosure, Pen testing, Patch Watch, Passwords, Microsoft, Metasploit, Hackers, Exploit code, Data theft, Browsers, Botnets

Blog posts 2007-05-21

New MS tool isolates Office 2003 zero-day exploits

Microsoft plans to ship a file conversion tool to give Office 2003 users a chance to protect against exploits rigged into .doc, .xls, .ppt documents.The tool, called MOICE Microsoft Office Isolated Conversion Environment, is a direct response to the nonstop zero-day attacks that use rigged Word, Excel and Powerpoint documents...

Tags: Hackers, Exploit code, Digital rights management, Data theft, Browsers, Botnets, Metasploit, Microsoft, Patch Watch, Pen testing, Responsible disclosure, Rootkits, Spyware and Adware, Viruses and Worms, Vulnerability research, Windows Vista, Zero-day attacks

Blog posts 2007-05-10

Additional Resources

Attackers pounce on Microsoft PowerPoint zero-day

Attackers are using rigged PowerPoint files to exploit an unpatched vulnerability in Microsoft's presentation software, according to warning late Thursday from the software maker. In a pre-patch advisory, Microsoft described the attacks as "limited and targeted," the kind of language that suggests it is being used to...

Tags: Attacker, Microsoft PowerPoint, Microsoft Corp., Microsoft Office, Office Suites, Software, Ryan Naraine

Blog posts 2009-04-02

Microsoft confirms 0-day in Excel, expands list of vulnerable systems

Microsoft has confirmed that the code execution vulnerability reported yesterday in Excel is real, and has expanded the list of vulnerable systems. Microsoft has stated that the code execution vulnerability discovered by Symantec, now known by CVE number 2009-0238, is legitimate. They have also expanded their...

Tags: Microsoft Corp., Microsoft Excel, Microsoft Office, Office Suites, Software, Adam O'Donnell

Blog posts 2009-02-24

A (Microsoft) Codename a day: Wringer

A Microsoft Codename a day: WringerMicrosoft ain't normalThey're supposed to be the doctored masters of the machine.("Please state your problem as a question".)Customary to link the source?Please could you add a link to Hensing's blog when quoting from it?linkSorry. Not sure what happened, but it's added now. And here it...

Tags: Blogging, Microsoft Corp.

Discussion threads 2008-08-29

Microsoft confirms Excel flaw; outlines defense

The Microsoft Security Response Center has confirmed ongoing attacks against Excel and is recommending that users either run files through a tool that strips out exploit code or block Office 2003 and earlier formats except for those from trusted locations. In its advisory MSRC late Tuesday said:...

Tags: Attacker, Microsoft Security Response Center, Vulnerability, Microsoft Corp., Flaw, Microsoft Excel, Microsoft Office, Security, Office Suites, Software, Larry Dignan

Blog posts 2008-01-16

New MS tool isolates Office 2003 zero-day exploits

New MS tool isolates Office 2003 zero-day exploitsStrips out macros and VBA???Talk about making something useless.Kludgy is better than nothing, I guessOur MS rep said he hadn't heard of the Office zero-day vulnerability issues, but luckily MS must have. Now if they can just refine this solution so it's...

Tags: tool, Microsoft Office, Microsoft Corp., Microsoft Office 2007, zero-day bug, Microsoft Office 2003, New MS tool

Discussion threads 2007-05-10