Microsoft Word file security flaw uncovered

Microsoft Corp. is again facing criticism from security experts after a researcher posted instructions for circumventing a password feature in the company’s popular Microsoft Word word processing program.

The feature is designed to protect the content of specific elements of Word documents, such as forms or comments, from reviewers. However, a user can find and erase the password for the feature by saving the Word document as an HTML file and then viewing it with a simple text editor, according to a security alert posted Saturday to the Bugtraq security newsgroup.

Microsoft introduced a number of new security features in Word, Outlook and other products with the release of Office 2003 in October under the heading of “information rights management.”

The features are based on Microsoft’s Windows Rights Management Service technology, part of Windows Server 2003, and are designed to allow organizations to prevent digital content from being copied or modified without the author’s knowledge. The new rights management features allow Word users to assign file permissions based on user roles, restrict printing and set expiration dates after which files cannot be opened.

Microsoft acknowledges on its Web page that the password feature is less secure than other security features, such as those allowing users to lock entire documents with a password.

Would you recommend this article?

Share

Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.


Jim Love, Chief Content Officer, IT World Canada

Featured Download

Featured Articles

Cybersecurity in 2024: Priorities and challenges for Canadian organizations 

By Derek Manky As predictions for 2024 point to the continued expansion...

Survey shows generative AI is a top priority for Canadian corporate leaders.

Leaders are devoting significant budget to generative AI for 2024 Canadian corporate...

Related Tech News

Tech Jobs

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

Tech Companies Hiring Right Now