Fixes a vulnerability that could allow remote code execution

Feb 11, 2010 14:50 GMT  ·  By

Microsoft has released Office 2004 11.5.7 for Mac, an update that applies to the Office 2004 Standard Edition, Office 2004 Student and Teacher Edition, Office 2004 Professional Edition, Word 2004, Excel 2004, PowerPoint 2004, and Entourage 2004. The update is free for all existing users of the aforementioned pieces of software.

According to the company developing the popular Windows operating system, Office 2004 Update 11.5.7 fixes vulnerabilities in Office 2004 that an attacker can use to overwrite the contents of a computer's memory with malicious code. Microsoft directs users to security bulletin MS09-027 for more information.

There, customers learn that, “This security update resolves a privately reported vulnerability in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.”

According to the company, this security update is rated Important for all supported editions of Microsoft Office XP and Microsoft Office 2004 for Mac. Microsoft also explains how it was able to plug this hole, that is “by modifying the way that Microsoft Office opens files.” It adds, “Microsoft recommends that customers apply the update at the earliest opportunity.”

The Windows maker also pledges to continue providing vulnerability information to major security software providers in advance of each monthly security update release, in order to improve security protections for its customers.

Microsoft Office 2004 Update 11.5.7 for Mac requires Mac OS X 10.2.8 (Jaguar) or later. Using the download link below, readers can update their 2004 edition of Office for Mac immediately.

Download Microsoft Office 2004 Update (Free)