Archive

Archive for May 21, 2012

Checking Macs for the Microsoft Office 2011 Jackpot Vulnerability using Casper

May 21, 2012 3 comments

As mentioned previously, the Office 2011 SP 2 14.2.0 volume licensed installer does something bad: it makes the /Applications/Microsoft Office 2011 folder and all of the enclosed files and applications readable and writable by all users on the system. This is otherwise known as setting world-writable permissions.

To help with the task of identifying which Macs are affected by this issue, I’ve written a Casper Extensions Attribute and posted it on my GitHub repo. The Extensions Attribute is available here.