Microsoft Corp warned on Wednesday that users of its Office software were at risk of having their computers taken over by an attacker unless they applied a patch to correct the problem.
The world's largest software maker said a "critical" flaw in its Visual Basic for Applications software, used to develop applications for Windows and Office, could enable a malicious programmer to create documents that would launch attacks on unsuspecting users.
Microsoft has vowed to improve security and reliability of its software, which has been hit by several high-profile flaws this year. The Slammer worm nearly brought the Internet to a halt in January while the Blaster worm and its variants crippled hundreds of thousands of computers in August.
The flaw exploited by Blaster first appeared in a Microsoft security bulletin in mid-July, which was followed by the release of the worm sometime during the first week of August.
While experts said that it is difficult to determine whether the Blaster worm was created in response to the July security bulletin, they added that there was a slight risk that the latest disclosure could spawn a new virus.
Redmond, Washington-based Microsoft urged users in a security bulletin to apply the software fix.
At risk were recent versions of Microsoft's Access, Excel, PowerPoint, Publisher, Visio, Word and Works applications, which are part of the Office family of software used in a range of tasks such as creating databases, documents, spreadsheets and presentations as well as publishing documents and Web pages. Some applications from Microsoft's Great Plains business software division were also affected, Microsoft said.
A user could trigger an attack by opening a document for any program that contains Visual Basic components, the company said.
Experts said that any virus that exploits the Visual Basic flaw was unlikely to cause major damage.
"There are a number of factors that minimize the risk in this case," said Oliver Friedrichs, a senior manager at computer security and services provider Symantec Corp.
"You need to open a document that someone sends to you, where with Blaster you simply had to be on the Internet," he said.
A magnitude 7.0 earthquake struck off Yilan at 11:05pm yesterday, the Central Weather Administration (CWA) said. The epicenter was located at sea, about 32.3km east of Yilan County Hall, at a depth of 72.8km, CWA data showed There were no immediate reports of damage. The intensity of the quake, which gauges the actual effect of a seismic event, measured 4 in Yilan County area on Taiwan’s seven-tier intensity scale, the data showed. It measured 4 in other parts of eastern, northern and central Taiwan as well as Tainan, and 3 in Kaohsiung and Pingtung County, and 2 in Lienchiang and Penghu counties and 1
A car bomb killed a senior Russian general in southern Moscow yesterday morning, the latest high-profile army figure to be blown up in a blast that came just hours after Russian and Ukrainian delegates held separate talks in Miami on a plan to end the war. Kyiv has not commented on the incident, but Russian investigators said they were probing whether the blast was “linked” to “Ukrainian special forces.” The attack was similar to other assassinations of generals and pro-war figures that have either been claimed, or are widely believed to have been orchestrated, by Ukraine. Russian Lieutenant General Fanil Sarvarov, 56, head
FOREIGN INTERFERENCE: Beijing would likely intensify public opinion warfare in next year’s local elections to prevent Lai from getting re-elected, the ‘Yomiuri Shimbun’ said Internal documents from a Chinese artificial intelligence (AI) company indicated that China has been using the technology to intervene in foreign elections, including propaganda targeting Taiwan’s local elections next year and presidential elections in 2028, a Japanese newspaper reported yesterday. The Institute of National Security of Vanderbilt University obtained nearly 400 pages of documents from GoLaxy, a company with ties to the Chinese government, and found evidence that it had apparently deployed sophisticated, AI-driven propaganda campaigns in Hong Kong and Taiwan to shape public opinion, the Yomiuri Shimbun reported. GoLaxy provides insights, situation analysis and public opinion-shaping technology by conducting network surveillance
‘POLITICAL GAME’: DPP lawmakers said the motion would not meet the legislative threshold needed, and accused the KMT and the TPP of trivializing the Constitution The Legislative Yuan yesterday approved a motion to initiate impeachment proceedings against President William Lai (賴清德), saying he had undermined Taiwan’s constitutional order and democracy. The motion was approved 61-50 by lawmakers from the main opposition Chinese Nationalist Party (KMT) and the smaller Taiwan People’s Party (TPP), who together hold a legislative majority. Under the motion, a roll call vote for impeachment would be held on May 19 next year, after various hearings are held and Lai is given the chance to defend himself. The move came after Lai on Monday last week did not promulgate an amendment passed by the legislature that