Microsoft criticised by SANS for releasing vulnerability details
Microsoft's advance notifications of patching are putting Mac users at risk. Speaking to Computer World, Swa Frantzen, an analyst at SANS Institute's Internet Storm Center, criticised Microsoft for issuing patches that fix the Windows versions of PowerPoint while announcing that patches for the same flaws in the Mac editions would not be released until June.
He claimed that revealing this information would allow a hacker to hijack computers before a patch is available. Microsoft revealed that Office for Mac 2004 and Office for Mac 2008 contain three unpatched vulnerabilities and the combination could be used by hackers to craft exploits targeting Macs.
An online poll on the ISC site showed that 47 per cent agreed Microsoft had been irresponsible in omitting patches for the Mac. Frantzen said: “Microsoft is the one big company screaming loudest of all over ‘responsible disclosure'.
