MS acknowledges Office 2008 flaw, promises fix
updated 11:30 pm EST, Sat January 26, 2008
Office 2008 update coming
Microsoft has acknowledged a security flaw in its recently released Office 2008 suite and has promised an update to fix the issue. The installer flaw, reported earlier this week, incorrectly grants ownership of the files to a particular local user as it installs them, allowing a second local user -- without administrative access -- to modify the Office 2008 install. According to the company, the issue, however, does not expose the Office 2008 install to modifications by any networked user account or to any local account other than the second one created on your Mac. The Mac BU says that it is working on an update to Office 2008 that will automatically fix the file ownership (will be made available via Microsoft's AutoUpdate tool and via a web download), but offered a set of terminal commands users can run to repair the issue if the suite has already been installed.
why...?
01/27, 08:44am reply
It's not like the MacBU are new to the permissions issue, so the real question is why they did it or what they were thinking in the first case? Probably an increased level of anti-piracy providing the application or other (hidden) application with the ability to write directly to itself? Sneaky?
Feathers
Forum Regular
Joined: Oct 1999
Probably not deliberate
01/27, 05:47pm reply
More likely just not a good QA on the install process. If MS wanted to be intentionally sneaky, I'm sure they'd have done a (somewhat) better job of it.
dimmer
Mac Enthusiast
Joined: Feb 2006
Re: why?
01/28, 08:23am reply
Keep in mind this is the first time they've used the MacOS installer, vs. their own. Probably didn't know what they were doing.
Also, Apple and other companies have had installer issues in the past.
testudo
Fresh-Faced Recruit
Joined: Aug 2001