Technology news and Jobs arrow Information Technology News arrow DIY security fix for Office 2008
DIY security fix for Office 2008 E-mail
by Stephen Withers   
Tuesday, 29 January 2008
An Office 2008 installer error results in the suite's files being owned by the wrong user, but Microsoft has offered a manual fix until an update can be delivered.

Register now to win a Canon EOS 500D Cannon EOS 500D Digiral SLR

The fix was described in Mac Mojo, the Office for Mac team blog. It requires the user to enter a pair of fairly lengthy Terminal commands to change the permissions and ownership of four folders and their contents.

The length of these commands mean they are wrapped across several lines on the web page, so one of the easiest ways of entering them correctly is to copy and paste them into TextEdit so the line breaks can be removed before copying and pasting the edited commands into Terminal.

The operation should be carried out from an account with administrator privileges.

Microsoft is working on an Office 2008 update to automate the process, which will be available via the Microsoft AutoUpdate utility and from the company's web site. That update had not been released at the time of writing.

Presumably the problem also will be corrected on future batches of the Office 2008 DVD.

The security risk presented by this error is minor, as the only account that has unwanted levels of access to the affected directories is the second user created on that system. One possible risk arises because even where just one person will be using a Mac, there is a recommendation that they create a second, non-administrator account for everyday use to mitigate potential risks associated with malware. There could be room for someone to exploit this situation to inject malicious code into one or more of Office's executable files.

Please enable JavaScript in your browser to post your comment!

Tags See All Tags Add New Tag...

Please Enter New Tags Separated By Comma's
  Or Close

Macintosh  Microsoft  Security  Software  Stephen Withers 
Powered By Joomla Tags

 
< Next story in category   Previous story in the category >
iTWire user statistics Visitors last 30 days
665,005
Subscribers 14,517
#1 independent technology news advertise here
  •   *  
  • Search
  • AdvSeach
  • Login
  • Events
  • FreeStuff

Follow iTWire on Twitter

About iTWire

iTWire is all about technology news, information, jobs and community for the IT and telecommunications industry professional. Subscribe to our free ICT daily newsletter