Office's Zero-day error continues to cause anxiety

Security experts expressed concern about the safety of users of Microsoft Office software when a series of Zero-day errors were discovered recently.

Cory Nachreiner, a network security specialist with WatchGuard Technologies (watchguard.com), said the Office suite's five unpatched vulnerabilities could lead to a 'malware storm'.

The fifth flaw in this "Zero-day error" series was officially confirmed by Microsoft last Friday (2-2) and prompted researchers to ask: ' Is there any day at Microsoft? is also zero-day? '

The latest vulnerability affects Exel and allows attackers to execute malicious code remotely on victim computers. The previous four vulnerabilities are all in Microsoft Word.

Experts say hackers have begun exploiting newly discovered vulnerabilities and claim that attacks will continue.

Microsoft and other security software vendors recommend that users should not open any suspicious attachments.

Mr. Nachreiner also warned that if Microsoft does not promptly release patches next Tuesday (13-2) along with a monthly security upgrade, the consequences will be unpredictable.

' With a floating Zero-day bug on the internet, I hope that Microsoft will resolve Office issues soon, preferably on the release date of the upcoming patch .' Mr. Nachreiner said.

' Otherwise, many innocent Office users will be swept away by this malware storm .'

Hoang Minh