Microsoft admits security flaw in Mac Office 2008 Installer; promises fix

“You may have seen recent reports on the web of a security issue in the installer for Mac Office 2008. The issue is that our installer is incorrectly granting ownership of the files to a particular local user as it installs them, so that if your Mac actually has a second local user and that user is not an administrator on your Mac, they could modify your Office 2008 install. The issue does not expose the Office 2008 install to modifications by any networked user account or to any local account other than the second one created on your Mac,” Erik Schwiebert posts in Microsoft’s Office for Mac blog.

“Microsoft and the MacBU take all security issues seriously, and we intend to fix this situation in several ways. First of all, if you have already installed Office 2008, you can run two commands in the Terminal to fix the file ownership and remove the security concern (see instructions below). Second, the MacBU is working on an update to Office 2008 that will automatically fix the file ownership for you. This update will be made available via Microsoft’s AutoUpdate tool and via a web download,” Schwiebert writes.

Instructions for updating the file ownership settings yourself (admin required) here.

MacDailyNews Take: Microsoft is really good at promising; delivering, not so much. Do you really need Microsoft Office? Give Apple’s free 30-day iWork ’08 trial a try and find out for yourself.

24 Comments

  1. Sadly, yes, I do need office. Because my office works with several clients that need to share .docx documents back and forth. While I do have, use and prefer iWork, I also purchased the Office 2008 upgrade to be sure that the work gets done smoothly. My clients know we are committed to open source but they also understand the ball and chain their technology is tied to.

  2. I don’t like Microsoft Windows Operating systems nor do I like their Music Players.

    But they do make a decent Game Console & a decend word processor ( Office 2008 ). Microsoft over promises & underdelivers, but office is a decent software. iWork is an awsome program but I feel I can get more done with ofice. And since I’m obilgated to use Office for Windows, the transition of using it on a Mac (which I have at home) is seemless.

  3. Another bogus report from MAC astroturfers. There are NO Microsoft Office security flaws in the wild. Enough with the FUD already, MAC sheep.

    The problem is MAC didn’t license Windows Vista from Microsoft so that there would only be one version of Office—Office for Windows. I don’t know why Apple has to make their own OS when there’s Windows.

    Your potential. Our passion.™

  4. iWork is nicer. but if u work in an office, u will need Office.
    bc chances are not everyone is going to have a mac they are going to have pc’s with Office.
    and they will have word and want .doc files or send u formatted .doc files.
    or use outlook with ms exchange server for their corporate email accounts. which sucks when u want to use mail for all ur mail.

  5. @Lilochris,” iWork is an awsome program but I feel I can get more done with ofice. And since I’m obilgated to use Office for Windows, the transition of using it on a Mac (which I have at home) is seemless.”

    Can you get more work done, or do you only FEEL you can? Is it seamless, or does it seem less of an awesome problem? Words mean things.

  6. The only reason I stick with Office is that I have to share documents with references created with Endnote. Guess what: The latest version of Endnote is still not able to work with Word for Mac 2008!

    So for now I just stick with Word 2004, Keynote, and whatever spreadsheet program opens when I double-click on spreadsheet files (most of them are either templates or created on Windozes — and for my work, I seriously do not see differences between Excel and Numbers).

    I can open Office 2007 files with no problem. So, jog on, Office 2008! (for now)

  7. As an attorney, I use Office 2004 mainly because of its tight integration with e-mail, calendar, notes, tasks, contacts and documents. The Project Center is its most important feature, and one I value highly. Does any other office suite offer this for the Mac? I’m not sure, but I think Office 2004 could use some competition in this regard.

  8. Until my grad school will accept papers formated by iWork and Apple adds some basics features to make it more attractive in the academic realm, Office is what I’ll still use. Though I will admit I like iWork, and I use it for non school related activities.

  9. Macaday – Easy.
    1. I installed MS Office.
    2. My boss noticed my Mac makes prettier graphs than his Windows version.
    3. He also and realized he wouldn’t have to make the graphs, if I did.

    D’OOOOOOOOOOH!

    P.S. – And don’t even get me started about my new Powerpoint responsibiliites!

  10. Here comes the Mac Office apologists..oh spare me!

    “I need Office because…”

    Because what? Don’t you see the cycle?

    Nobody makes a move so you all SUFFER AS A RESULT!!

    Make the move to OpenOffice on Windows and NeoOffice on OS X.

    Guess what? It’s free and compatible with Office!!!

    The list of security issues with Microsoft Office on the Mac is notorious! It’s not worth it.

    Microsoft is CRAP. Don’t use it, that’s why you use a Mac in the first place.

    Now don’t be cowards, download Open Office or NeoOffice and see for yourself.

    It works good.

    GET OFF THE MICROSOFT TIT!!

    Use iWork if you don’t need compatibility, support Apple and FSCK MICROSOFT.

    Don’t feed the problem, be part of the solution.

    Be surprised how shit changes when you stand up instead of pissing like a scared dog.

  11. (Ron) I have to use office, since I’m a student & I can’t use iWork if I’m required to use Office. The course uses books that instruct examples using Office. I’ve Used The current iWork trial and I do admit it’s a nice program. I mean I can get more work done with office because I don’t have to transition between programs or Instruction. Going between them will take more time and projects will not be par with requirements

    If it wasn’t a requirement, then I would use iWork all the way.
    Besides, My version of office 2004 Works just fine. It hasn’t crashed. I’m not happy knowing there’s many security holes but at least they’re SSLLOOWWYY being patched.

    I would go the iWork way when the time comes when I’m finished as a student where I’m not required to use Office.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.