Discover new vulnerabilities in Microsoft Office 2000 package

Security firm Symantec has just announced on the weblog Security Response a vulnerability within the Microsoft Office 2000 suite, enabling a dangerous type of Trojan to work.

According to Symantec's confirmation, the vulnerability arises when Office 2000 runs in a Windows 2000 operating system environment; and this type of security exploit Trojan is Trojan.MDropper.Q (by the name of Symantec).

Trojan.MDropper.Q will drop a dangerous file into the destination computer. This file will generate another file that is the new version of the "backdoor" Trojan - Backdoor.Femo .

However, hackers can only take advantage of the vulnerability when the exploit code is enabled in the affected Microsoft Word 2000 environment. Because of this feature, the new vulnerability is not suitable for creating other types of self-replicating network worms.

DUYLONG