Risk
4/25/2012
12:37 PM
50%
50%

Mac Users Face Office Update Bugs, Flashback Variants

Microsoft removes an automated update for Office for Mac 2011 after users report corrupted Mac Outlook settings, and a new version of Flashback malware surfaces.

Anonymous: 10 Facts About The Hacktivist Group
Anonymous: 10 Facts About The Hacktivist Group
(click image for larger view and for slideshow)
Microsoft has temporarily stopped issuing its most recent, automatic update for Office for Mac 2011, after some users reported that the update had corrupted or deleted their Outlook for Mac data. "Our goal is provide the simplest update experience for everyone--so we have temporarily stopped pushing out the SP2 update through Microsoft AutoUpdate while we investigate the issue," the company said in a blog post.

Microsoft had begun pushing the service pack 2 (SP2) update via its Apple OS X AutoUpdate software on April 12. But Friday, the company acknowledged that "a small percentage" of users were reporting that the update had created problems with their Outlook for Mac database, as well as this error message: "Please upgrade the Office database."

Although the automatic update has been suspended indefinitely, Office for Mac 2011 users still can download and install the SP2 update. But Microsoft has cautioned against doing so, at least without first using one of the two workarounds that the company has published to address the database issue, both of which involve rebuilding the Outlook database.

[ Better coding can protect against attacks, too. See Schwartz On Security: Secure Coding Or Bust. ]

Some users on Microsoft's Office for Mac site, however, are reporting that even with the workarounds, they're still not able to use Outlook. "This update is TERRIBLE. I did the update and now my text-only emails take 1-2 minutes to send and my emails with attachments fail altogether," said a poster who listed his name as Andrew. "I've rebuilt the database following the instructions, and [get] the same result."

A post from "Steve" said that the update had led to poorly managed network connections. "It appears that this update has made worse a problem that has plagued others--namely, that Outlook maintains a constant connection to Exchange (2007) and chews up nearly all available network bandwidth. This is seen within corporate networks as well as [for] remote [users]. Basically, it renders Outlook nearly useless as one has to terminate Outlook in order to do any other work."

Other users of the SP2 update have reported lost contacts, no longer being able to use right-to-left languages such as Arabic and Hebrew, broken Gmail IMAP connections, and inappropriate levels of CPU usage by Outlook.

In other bug-related Mac news, security software vendor Intego Monday said that it's seen a new version of the Flashback malware appear. Dubbed Flashback.S, the malware continues to target the Java vulnerability that Apple patched earlier this month.

If Flashback.S encounters an Apple OS X machine with the vulnerability, the Java applet can install itself automatically, no administrator-level password required. At that point, the applet installs multiple malicious files, then erases itself to help avoid detection. As with the previous version of Flashback, however, the malware won't attempt to install any malicious files--and in fact will immediately delete itself--if it detects the presence of Xcode, Little Snitch, or Mac antivirus software from one of a number of vendors.

InformationWeek is conducting a survey to gauge the state of enterprise data centers in 2012. Upon completion of our survey, you will be eligible to enter a drawing to receive an 32-GB Apple iPod Touch. Take our State Of The Data Center Survey now. Survey ends April 27.

Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.