Microsoft announces tools to keep bad Office files at bay

Microsoft Corp. released a pair of tools on Monday that help protect computers from Office 2003 files containing malicious software code.

Both tools, which were announced earlier this month, are designed to help defend against Office "zero-day" attacks, which take advantage of vulnerabilities before a patch is released by Microsoft. These type of attacks have become more common in recent months as attackers look for holes in Office to penetrate corporate networks. The first tool to defend against these attacks, called Microsoft Office Isolated Conversion Environment (MOICE), is meant to protect users running Office 2003 and 2007 Office. The tool does not work with other versions of Office.
MOICE works by converting Office 2003 binary files to the Office Open XML format used by 2007 Office, blocking out malicious code in the process. Importantly, this conversion takes place inside an "isolated environment," which Microsoft said prevents malicious code from running on the computer.