Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 875840" data-attributes="member: 32260">Even if you will use all methods from this thread to harden Word 2007 (Word tweaks, firewall rules, etc.), then it would be still insufficient. They do not prevent in-memory exploits. For example, the known vulnerability related to the equation editor was patched by Microsoft only if you installed the Service Pack 3 for the 2007 Microsoft Office Suite. Some other exploits can be not patched, because Word 2007 is officially not supported by Microsoft. Any Word exploit opens the possibility of using fileless methods, so you have to harden the system against scripts and popular LOLBins. This can be done by properly configuring Anti-exe, SRP, etc. This way is appropriate only for users who have to use MS Word.My conclusion remains the same, you will spend more time thinking about securing MS Word 2007, than adapting to something else (simpler and safer). <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" /></blockquote>

[QUOTE="Andy Ful, post: 875840, member: 32260"] Even if you will use all methods from this thread to harden Word 2007 (Word tweaks, firewall rules, etc.), then it would be still insufficient. They do not prevent in-memory exploits. For example, the known vulnerability related to the equation editor was patched by Microsoft only if you installed the Service Pack 3 for the 2007 Microsoft Office Suite. Some other exploits can be not patched, because Word 2007 is officially not supported by Microsoft. Any Word exploit opens the possibility of using fileless methods, so you have to harden the system against scripts and popular LOLBins. This can be done by properly configuring Anti-exe, SRP, etc. This way is appropriate only for users who have to use MS Word. [B]My conclusion remains the same, you will spend more time thinking about securing MS Word 2007, than adapting to something else (simpler and safer). :)[/B] [/QUOTE]

Verification