4 ms·
That question actually made me question the technical competence of F-Secure. You would think an anti-virus company would be more knowledgeable about embedded o
by nhebb 15y ago
That question actually made me question the technical competence of F-Secure. You would think an anti-virus company would be more knowledgeable about embedded objects in Office documents.
- gvb 15y agoSomeone at EMC ran it, not F-Secure - F-Secure found the email in their submitted virus sample inventory, i.e. someone at EMC uploaded it to F-Secure as a sample.
- nhebb 15y agoAs far as I can tell, the statement "why the heck does Excel support embedded Flash is a great question" was made by the F-Secure blogger. Microsoft Office applications have a long history of allowing embedded OLE/ActiveX objects. There are a bunch of companies that sell Flash dashboard tools for Excel. While I'm not a fan of Flash dashboards, the question just gave me the impression that the author doesn't have a good understanding of the environment that their anti-virus products are trying to protect.
- uxp 15y agoIt was a rhetorical question. I'm sure most of their researchers know why it is enabled (because the registry is marked blah blah). They were asking why did Microsoft decide that users should be capable of embedding executables inside a document format that inherently cannot have executable code stuffed inside it and frankly does not need executable code stuffed inside it.