|
|
Forum Thread: MS Word Insecure
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.
This thread was submitted in the following forum:
Secunia PSI - Feedback and Questions
| ufo2826
| MS Word Insecure
|
|
|
by ufo2826 on 13th Dec, 2008 17:57
|
Posts: 21
User Since: 8th Dec, 2008
Secunia System Score: 91%
Location: Georgetown,TX, US |
PSI is giving me the following message:
----------------
"Microsoft Word 2003
This installation of Microsoft Word 2003 is insecure and potentially exposes your system to security threats!
Secunia strongly recommends that you update this program by installing the update that is provided by the vendor of this program.
Installation Path
c:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE"
----------------
MS Update shows no remaining updates for Msword 2003.
Has anyone else seen this?
Thanks.
|
|
|
| BigDave_39
| RE: MS Word Insecure
|
|
|
by BigDave_39 on 13th Dec, 2008 23:22
|
Posts: 175
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: Washington, DC, US |
what version does the psi report of your word?
--
Big Dave |
|
|
| ufo2826
| RE: MS Word Insecure
|
|
|
by ufo2826 on 14th Dec, 2008 03:36
|
Posts: 21
User Since: 8th Dec, 2008
Secunia System Score: 91%
Location: Georgetown,TX, US |
PSI shows 11.0.8237.0
|
|
|
| EP
| RE: MS Word Insecure
|
|
|
by EP on 14th Dec, 2008 05:43, last edited on 14th Dec, 2008 05:43
|
Posts: 5
User Since: 6th Jun, 2008
Secunia System Score: N/A
Location: N/A |
Yes. Am experiencing the same issue with the same version.
PSI registers it (and other Microsoft software, too) at a level 4 threat. Will be watching the replies carefully! |
|
|
| BigDave_39
| RE: MS Word Insecure
|
|
|
by BigDave_39 on 14th Dec, 2008 09:36
|
Posts: 175
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: Washington, DC, US |
It seems that there has been a false-positive detection of that program in the psi. But it also appears to have been corrected:
http://secunia.com/community/forum/thread/show/865...
Have you tried doing a full re-scan and seeing if that fixes the issue?
--
Big Dave |
|
|
| ufo2826
| RE: MS Word Insecure
|
|
|
by ufo2826 on 14th Dec, 2008 16:00
|
Posts: 21
User Since: 8th Dec, 2008
Secunia System Score: 91%
Location: Georgetown,TX, US |
3 comments:
1. My last scan was on 9 December. I rescanned today and the false positive is gone. Thank you, Secunia!
2. BEFORE I posted my original thread, I searched for "Word 2003 insecure" .... no hits. Same search today produces no hits.
3. I also searched for "Word 2003 false positive" ... no hits ... same today.
I'm new here ... can someone please tell me how I'm not understanding the search capability?
-----------------
Unrelated ... can someone help me pronounce "Secunia"? I asked them a week ago and they did not respond.
Thanks to everyone.
|
|
|
| EP
| RE: MS Word Insecure
|
|
|
by EP on 16th Dec, 2008 03:29, last edited on 16th Dec, 2008 03:29
|
Posts: 5
User Since: 6th Jun, 2008
Secunia System Score: N/A
Location: N/A |
I wonder whether I should be concerned!
Just ran PSI with high hopes and it is still registering Category 4 threats for MS products.
I think I will follow the thread you gave, Big Dave, to see if there is another solution. If there is none, I'll be back...
Thank you all.
(ufo2826, my favorite computer geek radio program pronounces it "Say-COO-Knee-Uh". This program is the reason that I'm here.) |
|
|
| ufo2826
| RE: MS Word Insecure
|
|
|
by ufo2826 on 16th Dec, 2008 05:47
|
Posts: 21
User Since: 8th Dec, 2008
Secunia System Score: 91%
Location: Georgetown,TX, US |
Which geek radio program is that? |
|
|
| Eagle2
| RE: MS Word Insecure
|
|
|
by Eagle2 on 16th Dec, 2008 08:32, last edited on 16th Dec, 2008 08:32
|
Posts: 12
User Since: 6th Jan, 2008
Secunia System Score: N/A
Location: N/A |
The problems is a Secunia PSI error. On 12/9/2008 Microsoft patched vulnerabilities in Excel and Word. On my computer I have Microsoft Office 2003 SP3. The Excel 2003 SP3 patch covers 3 vulnerabilities and the Word 2003 SP3 patch covers 8 vulnerabilities. For my software, the patches are only installed if the computer is running one of four operating systems: Windows 2000 SP4; Windows Server 2003 SP1; Windows Vista; Windows XP SP2. My operating system is Windows SP SP3 and Microsoft Update did not try to install these patches. I downloaded the patches (KB956357 and KB956357) to my PC but they would not install.
There are other Excel and Word software versions that were patched on 12/9/2008 and you can click on the "Download Solution" button on the "Insecure" tab in PSI. This takes you to the correct software download page. However, if Microsoft Update will not install the updates, downloading them and manually installing them probably won't work unless your operating system matches one of the systems listed in the "System Requirement"/"Supported Operating Systems:" section. Information on the download details can be obtained by clicking on the red Knowledge Base Article (KBxxxxxx) near the top of the page and then clicking on the "IT professionals:" link in the next page. This takes you to Microsoft TechNet where the Security Bulletin for your patch is displayed. Unfortunately, in my case, the Security Bulletins for Excel and Word did not provide any information about operating systems. This is unusual and is not up to Microsoft standards. |
|
|
| ufo2826
| RE: MS Word Insecure
|
|
|
by ufo2826 on 16th Dec, 2008 16:58
|
Posts: 21
User Since: 8th Dec, 2008
Secunia System Score: 91%
Location: Georgetown,TX, US |
Thank you for your detailed explanation. It's helpful to understand what happened.
I do believe Secunia has corrected the error.
Ed |
|
|
| Eagle2
| RE: MS Word Insecure
|
|
|
by Eagle2 on 17th Dec, 2008 22:03, last edited on 17th Dec, 2008 22:03
|
Posts: 12
User Since: 6th Jan, 2008
Secunia System Score: N/A
Location: N/A |
My MS Office 2003 SP3 Excel and Word running on Windows XP Pro SP3 have NOT been fixed by Secunia. I run scans at least once per day but my last scan (10 minutes ago) still listed these programs as Insecure and the patch available. The patch is not available because the patch only patches Service Pack 2 and not Service Pack 3. |
|
|
| cbeato
| RE: MS Word Insecure
|
|
|
by cbeato on 17th Dec, 2008 22:08
|
Posts: 13
User Since: 13th Dec, 2008
Secunia System Score: N/A
Location: N/A |
I had the some prob and thats the reason I went for the Tesco Complete Office.Never fails,!! |
|
|
| cbeato
| RE: MS Word Insecure
|
|
|
by cbeato on 17th Dec, 2008 22:17
|
Posts: 13
User Since: 13th Dec, 2008
Secunia System Score: N/A
Location: N/A |
on 17th Dec, 2008 22:08, cbeato wrote:
I had the some prob and thats the reason I went for the Tesco Complete Office.Never fails,!!
|
|
|
| cbeato
| RE: MS Word Insecure
|
|
|
by cbeato on 17th Dec, 2008 22:19
|
Posts: 13
User Since: 13th Dec, 2008
Secunia System Score: N/A
Location: N/A |
on 17th Dec, 2008 22:08, cbeato wrote:
I had the some prob and thats the reason I went for the Tesco Complete Office.Never fails,!!
And compared to the Microsot the Tesco cost peanuts |
|
|
| EP
| RE: MS Word Insecure
|
|
|
by EP on 18th Dec, 2008 04:53, last edited on 18th Dec, 2008 04:53
|
Posts: 5
User Since: 6th Jun, 2008
Secunia System Score: N/A
Location: N/A |
ufo2826,
It's the Kim Komando Show. |
|
|
| EP
| RE: MS Word Insecure
|
|
|
by EP on 18th Dec, 2008 05:18
|
Posts: 5
User Since: 6th Jun, 2008
Secunia System Score: N/A
Location: N/A |
Good news!
After a just-now scan Secunia says: "Congratulations. No programs are marked as being 'Insecure' on your computer."
Thanks everyone! |
|
|
| R.Berman5
| RE: MS Word Insecure
|
|
|
by R.Berman5 on 18th Dec, 2008 09:27
|
Posts: 3
User Since: 5th Mar, 2008
Secunia System Score: N/A
Location: N/A |
Perhaps as long as I've been using PSI, MS Word continued to be reported - insecure. Going to MS updates the only solution offered was to purchase Word 2007, an impossible feat when cash flow is hampered.
Today, some how I got on a MS website: http://office.microsoft.com/en-us/downloads/mainca... . To my amazement the scan came up with a Patch, where Secunia now reports Word 2002 as being patched. The site also had seven patches for Word 2007, which the MS Update page never suggested.
You might want to try this site for your issue.
Thank You Secunia for making this possible.
ERBY |
|
|
| Jim_in_Germany
| RE: MS Word Insecure
|
|
|
by Jim_in_Germany on 12th Mar, 2009 15:05, last edited on 12th Mar, 2009 15:05
|
Posts: 1
User Since: 30th Dec, 2007
Secunia System Score: N/A
Location: N/A |
@R.Berman5:
Thank a million! This link really helped me to solve this problem after ages of pulling my hair out!! |
|
|
|
