• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Attack Blocked

I was using my MS Word (2010 version) when a message suddenly popped up saying something like "Word encountered a problem and had to stop..." After 15 or 20 seconds it closed and reopened with a column on the left side of the file I was working on. This column presented two versions of my file that had been previously auto-saved.

I also noticed ha a window had opened on my screen but outside of the Word area. It looked like this:

Opening for "more details" provided the following additional information:

 I take some comfort from the fact that I don't need to take any further action, but I cannot avoid feeling a little anxious about it. What may this "Memory Heap Spray" attack come from and what can it be related to?

Thanks for any help.

Replies

Kudos1 Stats

Re: Attack Blocked

Hello LinYu2. This Microsoft article explains what this vulnerability is with Office 2010 and the age of the exploit. The solution is to upgrade your version of Office and/or follow these steps for a workaround. Rest assured that your Norton product protected you. Please run Windows updates and include "other software" in the download search to patch your version of office as applicable.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.270 on Android 1.93
Kudos0

Re: Attack Blocked

Hi SoulAsylum,

Thank you very much for your help. Here are some additional pieces of information that may help you in providing some further guidance:

I read the extensive materials under the "Microsoft article" link and also in links provided in this initial article. They are really huge and not very easy to follow by someone like me. I then tried the other option you suggested, running Windows updates.

One first question is that in the article materials, reference is made to several versions of Windows but NOT to Windows 10. I have Windows 10 Pro Version 1709 Build 16299547 and when I click on "Check for Updates" the response is that my system is up to date.

I also can see under Installed Update History that several updates for Microsoft Office Word 2010 have been installed, some as recently as July 10, 2018.

Can you please provide any additional suggestions?

Thanks again for your help.

Kudos2 Stats

Re: Attack Blocked

Even though Norton will alert to attacks, if the underlying vulnerability in the application (in this case, Word) has been patched through updates you will not be in any danger in the first place.  You actually are doubly-protected, since the program would no longer be at risk by virtue of the the update, and Norton will detect and block the attack anyway.  The following shows how to make sure that Microsoft Office programs are up to date:

https://support.office.com/en-us/article/install-office-updates-2ab296f3...

Office 2010

  1. Open any Office 2010 application, such as Word 2010 and create a document.

  2. Go to File > Help > Check for Updates.

  3. Choose Install Updates or Check for Updates. If neither option is available, follow the additional steps provided in the pop-up window that appeared after you chose Check for Updates.

Kudos0

Re: Attack Blocked

Hi, SendofJive,

Thanks for your input. It seems that my MS Office is all up to date. As I said, I can see some Word 2010 updates in the installed history as recently as July 10. Also, after following the path you suggested, I find no actual updates listed.

To this hour, no other "attack" has been announced by Norton, which is good. However, the underlying issue with my MS Word 2010 remains: The message "Word encountered a problem and needs to close" continues popping up at irregular intervals.

Thanks again for your guidance.

 

 

Accepted Solution
Kudos1 Stats

Re: Attack Blocked

Hello again LinYu2. The underpinning issue you are seeing is with MS Word 2010 itself in the Word graphics component. The fix/workaround for the issue is here.  Open the link then scroll down to the MS Office 2010 section, select the appropriate version of your product and click its name in blue. Another page will open with the applicable patch.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.270 on Android 1.93
Kudos0

Re: Attack Blocked

I just applied the patch as you recommended but I still have one remaining doubt.

The page containing the patches refers that they were applicable to Windows 7 and XP, but no mention of Windows 10... Also, on the list of patches for Word 2010, there was one for SP1 (32 bit) and another for SP2 (63 bit). I applied the one for SP1 but I'm still a little confused: On one spot (under File>Help>) it says I have Version 14.0.7208.5000 (32 bit). 

But when I open the link in that same page for "Additional Version and Copyright Information" I see this: "MS Word 2010 (14.0.7211.5000) SP2 MSO (14.0.7208.5000)."

Should I apply the patch for the SP2 or will it suffice to use the patch that I already applied for 32-bit SP1?

Please bear with me...

Thanks.

Kudos1 Stats

Re: Attack Blocked

Run the patch for 64 bit service pack 2 if your system is 64 bit. The version of Windows shouldn't be an issue. Make sure you reboot once the patches are installed.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.270 on Android 1.93
Kudos0

Re: Attack Blocked

Where I wrote 63-bit I obviously meant to say 64-bit...
Kudos0

Re: Attack Blocked

Well, it is really a little confusing. My Word 2010 version is 32-bit and my OS is 64-bit. When I now tried to apply the 64-bit, a message popped up saying I do not have a 64-bit device, in obvious reference to MS Word 2010. On the other hand, my Word 2010 is SP2 and when I tried to apply the patch for SP2 32-bit it tell me a patch has already been applied...

I will wait and see what happens (or rather, what does NOT happen) in the coming days. I mean to say, that nuisance of the error message I mentioned before.

In any case, I'm pretty sure the problem must have been resolved and I am marking your last post accordingly.

Thank you very much for your great help.

Cheers!

Kudos0

Re: Attack Blocked

You are very welcome. Have an awesome weekend.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.270 on Android 1.93

This thread is closed from further comment. Please visit the forum to start a new thread.