Microsoft Word Forms Passwords Hacked

Posted by Cliff on Wednesday January 7, 2004 @07:50AM from the back-to-the-drawing-board dept.

An anonymous reader notes: "SecurityFocus has published a hack that can be used to unlock Microsoft Word documents that have been password protected. The 'secure' file can easily be edited and the original password re-inserted, removing any trace of the modification. A ZDNet UK article says Dell uses password protected Word files to send quotes, which could make for a messy legal battle." This feature, known as 'Password to Modify', is not the password protection on the document itself, just the protection that restricts unauthorized editing of the file. This hack allows someone to download such a file, edit it, and restore the password...effectively allowing changes to the file to go potentially unnoticed.

3 of 438 comments (clear)

What do you mean, that's too cheap? by Trillan · 2004-01-07 07:52 · Score: 5, Funny

I swear, you guys gave me a quote of $6.35 for a new Latitude.
And it was about that time... by pjwalen · 2004-01-07 07:59 · Score: 5, Funny

that I noticed my customer was a 12 foot tall monster from the crustacious period! He looked me right in the eye and said, 'My quote for the dell says about Tree-Fitty!' and I said GOD DAMN YOU LOCHNESS MONSTER!
Microsoft's response by Ben+Hutchings · 2004-01-07 08:10 · Score: 5, Funny

Microsoft pointed to this Knowledge Base article. Choice quote: "Not all features that are found on the Security tab are designed to help make your documents and files more secure."