Forum Thread: MS Word Insecure

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
This user no longer exists MS Word Insecure
Member 13th Dec, 2008 17:57
Ranking: 0
Posts: 21
User Since: 1st Jan, 1970
System Score: N/A
Location: N/A
PSI is giving me the following message:
----------------
"Microsoft Word 2003
This installation of Microsoft Word 2003 is insecure and potentially exposes your system to security threats!

Secunia strongly recommends that you update this program by installing the update that is provided by the vendor of this program.

Installation Path
c:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE"
----------------
MS Update shows no remaining updates for Msword 2003.

Has anyone else seen this?

Thanks.


BigDave_39 RE: MS Word Insecure
Member 13th Dec, 2008 23:22
Score: 0
Posts: 177
User Since: 26th Nov 2008
System Score: N/A
Location: Washington, DC, US
what version does the psi report of your word?

--
Big Dave
Was this reply relevant?
+0
-0
This user no longer exists RE: MS Word Insecure
Member 14th Dec, 2008 03:36
PSI shows 11.0.8237.0

Was this reply relevant?
+0
-0
EP RE: MS Word Insecure
Member 14th Dec, 2008 05:43
Score: 0
Posts: 7
User Since: 6th Jun 2008
System Score: N/A
Location: N/A
Last edited on 14th Dec, 2008 05:44
Yes. Am experiencing the same issue with the same version.
PSI registers it (and other Microsoft software, too) at a level 4 threat. Will be watching the replies carefully!
Was this reply relevant?
+0
-0
BigDave_39 RE: MS Word Insecure
Member 14th Dec, 2008 09:36
Score: 0
Posts: 177
User Since: 26th Nov 2008
System Score: N/A
Location: Washington, DC, US
It seems that there has been a false-positive detection of that program in the psi. But it also appears to have been corrected:
http://secunia.com/community/forum/thread/show/865...

Have you tried doing a full re-scan and seeing if that fixes the issue?

--
Big Dave
Was this reply relevant?
+0
-0
This user no longer exists RE: MS Word Insecure
Member 14th Dec, 2008 16:00
3 comments:

1. My last scan was on 9 December. I rescanned today and the false positive is gone. Thank you, Secunia!

2. BEFORE I posted my original thread, I searched for "Word 2003 insecure" .... no hits. Same search today produces no hits.

3. I also searched for "Word 2003 false positive" ... no hits ... same today.

I'm new here ... can someone please tell me how I'm not understanding the search capability?

-----------------
Unrelated ... can someone help me pronounce "Secunia"? I asked them a week ago and they did not respond.


Thanks to everyone.
Was this reply relevant?
+0
-0
EP RE: MS Word Insecure
Member 16th Dec, 2008 03:29
Score: 0
Posts: 7
User Since: 6th Jun 2008
System Score: N/A
Location: N/A
Last edited on 16th Dec, 2008 03:30
I wonder whether I should be concerned!
Just ran PSI with high hopes and it is still registering Category 4 threats for MS products.
I think I will follow the thread you gave, Big Dave, to see if there is another solution. If there is none, I'll be back...

Thank you all.
(ufo2826, my favorite computer geek radio program pronounces it "Say-COO-Knee-Uh". This program is the reason that I'm here.)
Was this reply relevant?
+0
-0
This user no longer exists RE: MS Word Insecure
Member 16th Dec, 2008 05:47
Which geek radio program is that?
Was this reply relevant?
+0
-0
Eagle2 RE: MS Word Insecure
Member 16th Dec, 2008 08:32
Score: 0
Posts: 13
User Since: 6th Jan 2008
System Score: N/A
Location: N/A
Last edited on 17th Dec, 2008 21:59
The problems is a Secunia PSI error. On 12/9/2008 Microsoft patched vulnerabilities in Excel and Word. On my computer I have Microsoft Office 2003 SP3. The Excel 2003 SP3 patch covers 3 vulnerabilities and the Word 2003 SP3 patch covers 8 vulnerabilities. For my software, the patches are only installed if the computer is running one of four operating systems: Windows 2000 SP4; Windows Server 2003 SP1; Windows Vista; Windows XP SP2. My operating system is Windows SP SP3 and Microsoft Update did not try to install these patches. I downloaded the patches (KB956357 and KB956357) to my PC but they would not install.

There are other Excel and Word software versions that were patched on 12/9/2008 and you can click on the "Download Solution" button on the "Insecure" tab in PSI. This takes you to the correct software download page. However, if Microsoft Update will not install the updates, downloading them and manually installing them probably won't work unless your operating system matches one of the systems listed in the "System Requirement"/"Supported Operating Systems:" section. Information on the download details can be obtained by clicking on the red Knowledge Base Article (KBxxxxxx) near the top of the page and then clicking on the "IT professionals:" link in the next page. This takes you to Microsoft TechNet where the Security Bulletin for your patch is displayed. Unfortunately, in my case, the Security Bulletins for Excel and Word did not provide any information about operating systems. This is unusual and is not up to Microsoft standards.
Was this reply relevant?
+0
-0
This user no longer exists RE: MS Word Insecure
Member 16th Dec, 2008 16:58
Thank you for your detailed explanation. It's helpful to understand what happened.

I do believe Secunia has corrected the error.

Ed
Was this reply relevant?
+0
-0
Eagle2 RE: MS Word Insecure
Member 17th Dec, 2008 22:03
Score: 0
Posts: 13
User Since: 6th Jan 2008
System Score: N/A
Location: N/A
Last edited on 17th Dec, 2008 22:23
My MS Office 2003 SP3 Excel and Word running on Windows XP Pro SP3 have NOT been fixed by Secunia. I run scans at least once per day but my last scan (10 minutes ago) still listed these programs as Insecure and the patch available. The patch is not available because the patch only patches Service Pack 2 and not Service Pack 3.
Was this reply relevant?
+0
-0
cbeato RE: MS Word Insecure
Member 17th Dec, 2008 22:08
Score: 0
Posts: 13
User Since: 13th Dec 2008
System Score: N/A
Location: N/A
I had the some prob and thats the reason I went for the Tesco Complete Office.Never fails,!!
Was this reply relevant?
+0
-0
cbeato RE: MS Word Insecure
Member 17th Dec, 2008 22:17
Score: 0
Posts: 13
User Since: 13th Dec 2008
System Score: N/A
Location: N/A
on 17th Dec, 2008 22:08, cbeato wrote:
I had the some prob and thats the reason I went for the Tesco Complete Office.Never fails,!!

Was this reply relevant?
+0
-0
cbeato RE: MS Word Insecure
Member 17th Dec, 2008 22:19
Score: 0
Posts: 13
User Since: 13th Dec 2008
System Score: N/A
Location: N/A
on 17th Dec, 2008 22:08, cbeato wrote:
I had the some prob and thats the reason I went for the Tesco Complete Office.Never fails,!!


And compared to the Microsot the Tesco cost peanuts
Was this reply relevant?
+0
-0
EP RE: MS Word Insecure
Member 18th Dec, 2008 04:53
Score: 0
Posts: 7
User Since: 6th Jun 2008
System Score: N/A
Location: N/A
Last edited on 18th Dec, 2008 04:55
ufo2826,
It's the Kim Komando Show.
Was this reply relevant?
+0
-0
EP RE: MS Word Insecure
Member 18th Dec, 2008 05:18
Score: 0
Posts: 7
User Since: 6th Jun 2008
System Score: N/A
Location: N/A
Good news!
After a just-now scan Secunia says: "Congratulations. No programs are marked as being 'Insecure' on your computer."

Thanks everyone!
Was this reply relevant?
+0
-0
R.Berman5 RE: MS Word Insecure
Member 18th Dec, 2008 09:27
Score: 0
Posts: 4
User Since: 5th Mar 2008
System Score: N/A
Location: US
Perhaps as long as I've been using PSI, MS Word continued to be reported - insecure. Going to MS updates the only solution offered was to purchase Word 2007, an impossible feat when cash flow is hampered.

Today, some how I got on a MS website: http://office.microsoft.com/en-us/downloads/mainca... . To my amazement the scan came up with a Patch, where Secunia now reports Word 2002 as being patched. The site also had seven patches for Word 2007, which the MS Update page never suggested.

You might want to try this site for your issue.

Thank You Secunia for making this possible.

ERBY

--
mental health advocate
Was this reply relevant?
+0
-0
Jim_in_Germany RE: MS Word Insecure
Member 12th Mar, 2009 15:05
Score: 0
Posts: 1
User Since: 30th Dec 2007
System Score: N/A
Location: N/A
Last edited on 12th Mar, 2009 15:05
@R.Berman5:
Thank a million! This link really helped me to solve this problem after ages of pulling my hair out!!
Was this reply relevant?
+0
-0

This thread has been marked as locked.