20060612 Monday June 12, 2006

Some information about "SB.Starbugs"

You may have seen some news about an other virus for StarOffice and OpenOffice.org.
Symantec has reported it as SB.Starbugs.

I wasn't able to get the sample from Symantec, because such things are only given to AV vendors.

But Peter Ferrie from Symantec confirmed that "SB.Starbugs doesn't bypass OOo security checks and OOo will ask the user if to enable macros for that document. There are no exploits, no security concerns."

So SB.Starbugs does have some replication code, which might classify the macro as a virus, but OOo will not execute it without asking the user.

Again, it's just a macro, see “Some words about 'Macro Security' in office applications

Posted by Malte Timmermann ( Jun 12 2006, 09:59:50 PM CEST ) Permalink Comments [1]

 


Archives
Links

New Entry   Logout