Proof of concept Virus for OpenOffice

[PrimoTurbo]

Proof-of-concept virus gives insight into OpenOffice.org security failings.

http://arstechnica.com/news.ars/post/20070522-cross-platform-openoffice-macro-virus-revealed.html

[igknighted]

Has anyone really ever thought that the concept of macro's in these documents are safe? I mean really... I will say that there is more OO.o could do, but if you want a macro to be able to interact with the system there are risks, plain and simple. All openoffice could ever do is disable macro's and allow the user to look at the code before they could execute. It might already do this (MS Office doesn't run macro's before it asks by default I think, but IDK if you can look at them first), I really don't know. Basically, macros = unsafe. We've always known that. If they are run by default without asking then OO.o has some work to do. Otherwise, people need to be more aware. "Hmm, this OO.o document has a macro... lets run it..." is no more risky than running some random shell script or installing a random .deb. There are just some times you cannot protect the user from him/her self.