MS acknowledges Office 2008 flaw, promises fix
updated 11:30 pm EST, Sat January 26, 2008
Office 2008 update coming
Microsoft has acknowledged a security flaw in its recently released Office 2008 suite and has promised an update to fix the issue. The installer flaw, reported earlier this week, incorrectly grants ownership of the files to a particular local user as it installs them, allowing a second local user -- without administrative access -- to modify the Office 2008 install. According to the company, the issue, however, does not expose the Office 2008 install to modifications by any networked user account or to any local account other than the second one created on your Mac. The Mac BU says that it is working on an update to Office 2008 that will automatically fix the file ownership (will be made available via Microsoft's AutoUpdate tool and via a web download), but offered a set of terminal commands users can run to repair the issue if the suite has already been installed.
Grizzled Veteran
Joined: Oct 1999
why...?
It's not like the MacBU are new to the permissions issue, so the real question is why they did it or what they were thinking in the first case? Probably an increased level of anti-piracy providing the application or other (hidden) application with the ability to write directly to itself? Sneaky?