Windows 10 & MS Word Both Have Shown Flaws
Not much going on in the Business – Technology world lately but today we have two new stories for you, both of these found here are Microsoft programming gone wrong. In programs that we know are widely used.
Microsoft has recently fixed an issue with Windows 10, the issue was in the operating system. This bug allowed Microsoft store apps with extensive file system permission to access all files on users’ computers without consent.
Windows 10 has a platform called Universal Windows Platform (UWP), that allows apps to run on each Windows 10 device. UWP apps can access files like music, pictures, or devices like camera and microphones.
According to the developer of Windows app Sebastien Lachance, Windows 10 version prior to October of this year the update failed to display prompts for permission to access the file system due to a bug. This apparently left users data exposed to apps downloaded from the Windows Store. This means that until the newest version of Windows 10, the apps could be used to access the entire file system without asking the user for the proper permission.
Older versions of Microsoft Office as well as Microsoft Office 2016 had an unpatched logical flaw that could allow an attacker to embed malicious code inside a document file. This could cause the user to accidentally bring malware into their computer files.
The ‘online video’ option in Word is the flaw. The ‘online video’ allows the user to embed a video with a link to YouTube.
An attacker can use this bug to replace the user’s YouTube link with a malicious one of their own. This malicious link would be downloaded by Internet Explorer Download Manager.
Microsoft has no plans to fix the issue and says its software is “properly interpreting HTML as designed.”
QuickITPros, Inc.’s Essential Packages can keep your programs up to date and working properly.
With a huge increase in flawed software lately and so much cyber security gone wrong this is the most important time to stay vigilant! If you do not have our Essential Packages already, it really is time to get it.
Tired of paying to much for your Managed Services?
Why not give our Essential packages a look! We have exactly what every type of business needs.