bit-tech.net

Go Back   bit-tech.net Forums > bit-tech.net > Article Discussion

Reply
 
Thread Tools
Old 25th Mar 2014, 10:21   #1
Gareth Halfacree
WIIGII!
bit-tech Staff
 
Gareth Halfacree's Avatar
 
Join Date: Dec 2007
Location: Bradford, UK
Posts: 3,921
Gareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming Saiyan
Microsoft warns of Word zero-day vulnerability

Code execution flaw in RTF support.
http://www.bit-tech.net/news/bits/20...ord-zero-day/1
__________________
Author, Raspberry Pi User Guide Third Edition, 21 Brilliant Projects for the Raspberry Pi and more | gareth.halfacree.co.uk | twitter
bit-tech news correspondent, Custom PC columnist, other things to other people
I'm a filthy freelancer! Hire me!
Gareth Halfacree is offline   Reply With Quote
Old 25th Mar 2014, 10:40   #2
Umbra
Supermodder
 
Umbra's Avatar
 
Join Date: Nov 2013
Posts: 466
Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.
More people should try "Open Office" it will do what most people want for free and your not on the MS front line with all the scumbags trying to infect your software
__________________
“Success is 99 percent failure” Soichiro Honda

Skulduggery - case mod

Motorcycle Action Group. The Right to Ride.
Umbra is offline   Reply With Quote
Old 25th Mar 2014, 11:48   #3
RichCreedy
Hey What Who
 
RichCreedy's Avatar
 
Join Date: Apr 2009
Location: lost in the middle of lincolnshire
Posts: 4,282
RichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming Saiyan
I just tried the fixit on my system, and it came back as does not apply to your system, I have win8.1pro +office professional plus 2013
__________________
if there are errors in my messages, its because my brain is to far ahead of my hands
RichCreedy is offline   Reply With Quote
Old 25th Mar 2014, 12:36   #4
Snips
I can do dat, giz a job
 
Snips's Avatar
 
Join Date: Sep 2010
Location: wiv me kids
Posts: 1,875
Snips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming Saiyan
Quote:
Originally Posted by Umbra
More people should try "Open Office" it will do what most people want for free and your not on the MS front line with all the scumbags trying to infect your software
Unless you intend to send files to other Microsoft Office users.
Snips is offline   Reply With Quote
Old 25th Mar 2014, 13:13   #5
Gareth Halfacree
WIIGII!
bit-tech Staff
 
Gareth Halfacree's Avatar
 
Join Date: Dec 2007
Location: Bradford, UK
Posts: 3,921
Gareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming Saiyan
Quote:
Originally Posted by Snips View Post
Unless you intend to send files to other Microsoft Office users.
OpenOffice (and LibreOffice) support loading and saving to both .DOC and the new DocX format, and the latest Microsoft Office fully supports the Open Document Format used by OpenOffice. I should know: I wrote an entire book in LibreOffice, sending the files in .DOC format to the publisher. Worked fine.
__________________
Author, Raspberry Pi User Guide Third Edition, 21 Brilliant Projects for the Raspberry Pi and more | gareth.halfacree.co.uk | twitter
bit-tech news correspondent, Custom PC columnist, other things to other people
I'm a filthy freelancer! Hire me!
Gareth Halfacree is offline   Reply With Quote
Old 25th Mar 2014, 17:10   #6
Snips
I can do dat, giz a job
 
Snips's Avatar
 
Join Date: Sep 2010
Location: wiv me kids
Posts: 1,875
Snips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming Saiyan
As I've said before Gareth, I've been sent files that have been unable to open within Office. It wasn't Microsoft's fault. I was even asked to download a copy of the software to be able to open the file. It never was and we never used the company again. The majority of the business world is using Microsoft Office, if you make an open version, at the very least get it to be compatible with the major player.
Snips is offline   Reply With Quote
Old 25th Mar 2014, 17:19   #7
RedFlames
is not KidMod
 
RedFlames's Avatar
 
Join Date: Apr 2009
Location: The northern wastes of Geordieland
Posts: 4,042
RedFlames is a Super Spamming SaiyanRedFlames is a Super Spamming SaiyanRedFlames is a Super Spamming SaiyanRedFlames is a Super Spamming SaiyanRedFlames is a Super Spamming SaiyanRedFlames is a Super Spamming SaiyanRedFlames is a Super Spamming SaiyanRedFlames is a Super Spamming SaiyanRedFlames is a Super Spamming SaiyanRedFlames is a Super Spamming SaiyanRedFlames is a Super Spamming Saiyan
Quote:
Originally Posted by Gareth Halfacree View Post
OpenOffice (and LibreOffice) support loading and saving to both .DOC and the new DocX format, and the latest Microsoft Office fully supports the Open Document Format used by OpenOffice. I should know: I wrote an entire book in LibreOffice, sending the files in .DOC format to the publisher. Worked fine.
While interoperability between the two is a lot better than it was, there's still the odd issue on both sides... TBH I've had more grief with stuff done in iWork [Pages, Keynote and Numbers] than Libre/OpenOffice...

That said, are RTF documents that common any more? Haven't come across/been sent one in ages...
__________________
I have the heart of a child... in a jar... on my desk...

RedFlames is online now   Reply With Quote
Old 25th Mar 2014, 20:40   #8
RichCreedy
Hey What Who
 
RichCreedy's Avatar
 
Join Date: Apr 2009
Location: lost in the middle of lincolnshire
Posts: 4,282
RichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming SaiyanRichCreedy is a Super Spamming Saiyan
yeah I've had customers who have had issues with libre office and open office files when trying to use word/excel files.
__________________
if there are errors in my messages, its because my brain is to far ahead of my hands
RichCreedy is offline   Reply With Quote
Old 25th Mar 2014, 21:49   #9
wolfticket
Downwind from the bloodhounds
 
wolfticket's Avatar
 
Join Date: Apr 2008
Location: Devon, England
Posts: 1,529
wolfticket is definitely a rep cheat.wolfticket is definitely a rep cheat.wolfticket is definitely a rep cheat.wolfticket is definitely a rep cheat.wolfticket is definitely a rep cheat.wolfticket is definitely a rep cheat.wolfticket is definitely a rep cheat.wolfticket is definitely a rep cheat.wolfticket is definitely a rep cheat.wolfticket is definitely a rep cheat.wolfticket is definitely a rep cheat.
Quote:
Originally Posted by Umbra View Post
More people should try "Open Office" it will do what most people want for free and your not on the MS front line with all the scumbags trying to infect your software
Word is quite good though... Especially if you use the bits that most people don't use, and for a lot of people it's what they're comfortable with.

Compatibility is a moot point as it works both ways, but I haven't found it to be perfect by any means working in either direction or indeed between different versions of MS Office..
Most office packages will open files created in others but whether they'll look the same is another matter.

This sounds like a fairly niche exploit since it relies on using Word to preview emails via Outlook. Not a huge issue for most users.
__________________
Wolfticket: Ambitious but rubbish

"A facility for quotation covers the absence of original thought."
Dorothy L. Sayers (1893 - 1957)

Last edited by wolfticket; 25th Mar 2014 at 21:55.
wolfticket is offline   Reply With Quote
Old 25th Mar 2014, 22:09   #10
theshadow2001
I *am* a Dremel
 
theshadow2001's Avatar
 
Join Date: May 2012
Posts: 1,905
theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.
Compatibility is ok not brilliant. I reckon most users Professional or otherwise would be fine with what Libre office offers. But they use ms office at work so they use it at home.

Certainly I'll never buy office off of ms when Libre office us around.
theshadow2001 is online now   Reply With Quote
Old 25th Mar 2014, 23:08   #11
Umbra
Supermodder
 
Umbra's Avatar
 
Join Date: Nov 2013
Posts: 466
Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.Umbra is definitely a rep cheat.
Quote:
Originally Posted by wolfticket View Post
Word is quite good though... Especially if you use the bits that most people don't use, and for a lot of people it's what they're comfortable with.
I'm sure it is and I'm not disputing that but I'm too tight to buy software that I don't use that much especially if a free open source program does what I want
__________________
“Success is 99 percent failure” Soichiro Honda

Skulduggery - case mod

Motorcycle Action Group. The Right to Ride.
Umbra is offline   Reply With Quote
Old 26th Mar 2014, 07:32   #12
Alecto
Multimodder
 
Join Date: Apr 2012
Posts: 84
Alecto has yet to learn the way of the DremelAlecto has yet to learn the way of the DremelAlecto has yet to learn the way of the DremelAlecto has yet to learn the way of the DremelAlecto has yet to learn the way of the Dremel
Quote:
Originally Posted by Snips
Quote:
Originally Posted by Umbra
More people should try "Open Office" it will do what most people want for free and your not on the MS front line with all the scumbags trying to infect your software
Unless you intend to send files to other Microsoft Office users.
Why would this be an issue? Microsoft Office is incompatible with different versions of itself so anybody locked into M$ Office ecosystem (either by foolish personal choice or by company decision) is already familiar with formatting getting lost when sending stuff around. Don't want your documents to get all messed up? Don't use M$ Office.
Alecto is offline   Reply With Quote
Old 26th Mar 2014, 08:05   #13
Gareth Halfacree
WIIGII!
bit-tech Staff
 
Gareth Halfacree's Avatar
 
Join Date: Dec 2007
Location: Bradford, UK
Posts: 3,921
Gareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming Saiyan
Quote:
Originally Posted by Snips View Post
As I've said before Gareth, I've been sent files that have been unable to open within Office. It wasn't Microsoft's fault.
Why wasn't it Microsoft's fault? It certainly sounds like it was as much Microsoft's fault as OpenOffice's fault.

Tell you what, let's get scientific here. You make a file in Word, save it as DocX, and send it to me. Then post a screenshot of Word displaying said file in this 'ere thread. I'll download the file, open it in LibreOffice, and post a screenshot of the same file - and we'll see how good the compatibility really is.

You up for that, Snips?
__________________
Author, Raspberry Pi User Guide Third Edition, 21 Brilliant Projects for the Raspberry Pi and more | gareth.halfacree.co.uk | twitter
bit-tech news correspondent, Custom PC columnist, other things to other people
I'm a filthy freelancer! Hire me!
Gareth Halfacree is offline   Reply With Quote
Old 26th Mar 2014, 11:06   #14
Snips
I can do dat, giz a job
 
Snips's Avatar
 
Join Date: Sep 2010
Location: wiv me kids
Posts: 1,875
Snips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming Saiyan
How about you send me the file, since that's the major issue I've had with "open" Office.

"The majority of the business world is using Microsoft Office, if you make an open version, at the very least get it to be compatible with the major player."

I also said that but you cut it from the quote.
Snips is offline   Reply With Quote
Old 26th Mar 2014, 11:18   #15
Gareth Halfacree
WIIGII!
bit-tech Staff
 
Gareth Halfacree's Avatar
 
Join Date: Dec 2007
Location: Bradford, UK
Posts: 3,921
Gareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming Saiyan
Quote:
Originally Posted by Snips View Post
How about you send me the file, since that's the major issue I've had with "open" Office.
No need for the scare quotes, Snips; OpenOffice is open. Would you like a copy of the source code?

Here's a file created in LibreOffice and saved as .DocX (although I can provide the ODT version, if you've got a copy of Office new enough to support the Open Document Format), and here's what it should look like:


(Text courtesy Picksum Ipsum.)
__________________
Author, Raspberry Pi User Guide Third Edition, 21 Brilliant Projects for the Raspberry Pi and more | gareth.halfacree.co.uk | twitter
bit-tech news correspondent, Custom PC columnist, other things to other people
I'm a filthy freelancer! Hire me!
Gareth Halfacree is offline   Reply With Quote
Old 26th Mar 2014, 13:22   #16
Snips
I can do dat, giz a job
 
Snips's Avatar
 
Join Date: Sep 2010
Location: wiv me kids
Posts: 1,875
Snips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming Saiyan
Yep, that file works fine Gareth. Is that to Microsoft's credit then?
Snips is offline   Reply With Quote
Old 26th Mar 2014, 13:32   #17
Gareth Halfacree
WIIGII!
bit-tech Staff
 
Gareth Halfacree's Avatar
 
Join Date: Dec 2007
Location: Bradford, UK
Posts: 3,921
Gareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming Saiyan
Quote:
Originally Posted by Snips View Post
Yep, that file works fine Gareth. Is that to Microsoft's credit then?
No, that's all on the LibreOffice devs; as far as Microsoft Office is concerned, that's a native DocX file. Now, if you want to paint Microsoft in a good light, try it again with the Open Document Format version. If Office loads that without corruption, then yes; that would be to Microsoft's credit. (It should, by the way; as far as I'm aware, ODT support in the latest Office is pretty solid.)
__________________
Author, Raspberry Pi User Guide Third Edition, 21 Brilliant Projects for the Raspberry Pi and more | gareth.halfacree.co.uk | twitter
bit-tech news correspondent, Custom PC columnist, other things to other people
I'm a filthy freelancer! Hire me!
Gareth Halfacree is offline   Reply With Quote
Old 26th Mar 2014, 13:36   #18
Snips
I can do dat, giz a job
 
Snips's Avatar
 
Join Date: Sep 2010
Location: wiv me kids
Posts: 1,875
Snips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming SaiyanSnips is a Super Spamming Saiyan
Yep, on this device it's only using Office 2007 and it works fine. So is that to Microsoft's credit?
Snips is offline   Reply With Quote
Old 26th Mar 2014, 13:46   #19
Gareth Halfacree
WIIGII!
bit-tech Staff
 
Gareth Halfacree's Avatar
 
Join Date: Dec 2007
Location: Bradford, UK
Posts: 3,921
Gareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming SaiyanGareth Halfacree is a Super Spamming Saiyan
Quote:
Originally Posted by Snips View Post
Yep, on this device it's only using Office 2007 and it works fine. So is that to Microsoft's credit?
Absolutely it is, yes. So, we're agreed: compatibility, at least for word processor documents, between LibreOffice and Microsoft Office is fine these days. Huzzah!

Which means, of course, that this:
Quote:
Originally Posted by Snips View Post
The majority of the business world is using Microsoft Office, if you make an open version, at the very least get it to be compatible with the major player.
has come to pass; the LibreOffice team did "get it to be compatible with the major player." Not bad for a freebie, hey?
__________________
Author, Raspberry Pi User Guide Third Edition, 21 Brilliant Projects for the Raspberry Pi and more | gareth.halfacree.co.uk | twitter
bit-tech news correspondent, Custom PC columnist, other things to other people
I'm a filthy freelancer! Hire me!
Gareth Halfacree is offline   Reply With Quote
Old 26th Mar 2014, 14:14   #20
theshadow2001
I *am* a Dremel
 
theshadow2001's Avatar
 
Join Date: May 2012
Posts: 1,905
theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.theshadow2001 is definitely a rep cheat.
My only major complaint with Libre office writer is the image scaling tool is rubbish. If that was on par with Word it would be superdeeduperdy
theshadow2001 is online now   Reply With Quote
Reply

Tags
code execution, critical, fix-it, microsoft, microsoft office, microsoft word, outlook, security, vulnerablity, word, zero-day

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +1. The time now is 19:35.
Powered by: vBulletin Version 3
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.