Moice: The latest office security feature released by Microsoft

Source: Internet
Author: User
In May 21, Microsoft officially released moice, the latest security feature provided by Office 2003 and 2007.

Moice is Microsoft Office Isolated Conversion Environment (moice ). Don't ask me how to pronounce this word and why I chose such a name. One of the sorrows of developers is that they have no influence on the final name of the product. Alas, all power is in the hands of the market department. Well, let's get down to the truth. What is moice? We know that the latest security trend is to focus on attacks against computer systems from operating systems to applications. Program Transfer. Office programs, such as Word or PowerPoint, have been under attack recently. Calculate how many office security patches have been released by Microsoft in a while. Moice is designed for security vulnerabilities in office documents. In Office 2007, a new XML-based document format is proposed. Based on the analysis of past office security vulnerabilities, harmful documents often contain some unconventional formats. An interesting fact is that if you convert these harmful documents containing security vulnerabilities to the latest 2007 XML format, either the Conversion Tool reports a conversion failure, either the conversion tool will crash (crash ). The moice principle is that when you open an old version of the Office document, you can first start a conversion tool that runs in the restricted environment (isolated environment. Then, we use this conversion tool to convert the original office document to a 2007 XML format. If the conversion is successful, it is enabled normally. If the Conversion Tool fails or exits unexpectedly, a warning is given to the user. Through this measure, we hope that even if Microsoft has not found a (0-day exploit) office security vulnerability in the document, it will be prevented by moice. Of course, moice will affect the speed of file opening. However, there is no big difference between regular size files. In short, this is a very good security function. We strongly recommend that you install it. The following two sites contain more information, including how to install them. Http://www.microsoft.com/technet/security/advisory/937696.mspxhttp://support.microsoft.com/kb/935865

 

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.