Tuesday, January 8, 2008

Microsoft apologizes Office 2003 'mistake'

I found a very interesting news and wanted to share one article on it.
Microsoft has acknowledged it made a mistake over a security advisory it released concerning Office 2003.The advisory, posted in December, told users that dozens of file formats had been blocked in the latest service pack for Office 2003--Service Pack 3 (SP3)--because they were insecure. It provided a workaround for users who wanted to unblock the formats, but made the process complicated, requiring changes to the registry which could have made users' PCs inoperable if they were applied incorrectly.
On Friday, Microsoft admitted that the information it had provided was wrong, and that it had underestimated how many users had been affected. It now says that, instead of the file formats themselves being insecure, it is the parsing code that Office 2003 uses to open and save the file types that is less secure.
Speaking to ZDNet.co.uk on Friday, Reed Shaffner, worldwide product manager for Microsoft Office, confirmed that the advisory provided by Microsoft was incorrect, and that manual registry fix which Microsoft had provided had been difficult to implement by end users.
Asked why Microsoft had not made the fix easier to implement, Shaffner said: "We thought it would not impact many users. And the messages we have been receiving are that it hasn't affected many users. But it was a mistake on our part."

Source

No comments: