Microsoft sends Office vulnerability hacker warning to Vista users

Computer store news: Microsoft released a security alert on the product today, the company found in Windows Vista operating system, Server 2008 and Microsoft Office 2003 to 2010 a loophole. This virus email or link will contain a spoofed TIFF image that allows hackers to compromise the user's computer and compromise the system. However, the premise of all this is that the user must click on the link to be hacked. Once the user opens the TIFF format image, the program is automatically executed. After the computer is controlled, the hacker can control the user's computer and take whatever action he wants.

Hacking

And, Microsoft also pointed out that hackers may send a link to users via email or other user trust, and by persuading or tempting users to click on the link to view the page or The document, after clicking the link, the user's computer will be under the control of the user. Microsoft said: "This attack is interactive, and the attack will pretend to be an email requesting a potential attack target to open a specially crafted connection. Once the attachment is opened or previewed, it attempts to exploit the vulnerability to attack the user's computer through the malformed graphic image embedded in the document. Once an attacker successfully exploits the vulnerability, the same user rights as the logged in user can be obtained. ”

Microsoft has released a temporary fix for Microsoft Fix it to disable TIFF encoding and install the "Enhanced Mitigation Experience Toolkit" toolkit as a temporary solution.

At the same time, the company said it is currently addressing the issue with a permanent patch for the vulnerability and will be available for download during the monthly rational patch release or the next non-emergency patch release cycle. At present, the vulnerability does not involve too many operating systems. If you are a system user with the above vulnerability, please do not click any mail or link with unknown source to prevent the computer from being infected.