TalkingApes

Update: Microsoft Office 2003 apps, Explorer hit with new crash bugs

February 26, 2007 (Computerworld) — Microsoft Corp.’s Word 2003 and Excel 2003 can be crashed by attackers who feed the business applications malformed documents, Symantec Corp. reported today.

In separate alerts sent to subscribers of its DeepSight threat system, Symantec warned that the bugs — both discovered and disclosed by a Russian researcher with the moniker “sehato” — could be exploited by attackers to bring down the Office applications.

Microsoft denied that the bugs were actually vulnerabilities.

I guess these companies thinking about upgrading might want to really look at the cost-effectiveness of doing so relatively quickly.