Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

Word 2003 Gets 'Lawsuit Patch'

Microsoft issues update that brings software into compliance with patent judgment.

Racing to beat a court-ordered deadline, Microsoft on Saturday issued a patch for its Word 2003 product that brings the desktop product into compliance with a legal ruling.

The update followed the release in December of a patch that does the same for Word 2007.

The patches, available on Microsoft's OEM Partner and Download centers, strip Word programs of custom XML editing capabilities.

"You must install this update if you have been instructed to do so in a separate communication from Microsoft," the company said in a message on its download site posted Jan. 9.

The moves come after an appeals court last month ordered Microsoft to stop selling Microsoft Word by Jan. 11 because the software infringes on a patent held by a Canadian company. The judge also hit Microsoft with a $290 million fine. Microsoft is appealing.

The U.S. Court of Appeals struck down Microsoft's original appeal of a lower court's finding that Word infringes on a patent held by Toronto-based i4i Inc. I4i originally sued Microsoft in 2007, claiming that an XML editor built into Word steps on its patent.

In August, the U.S. District Court for Eastern Texas found in favor of i4i, prompting Microsoft's first appeal.

The ruling means Microsoft can't sell versions of Word that can open documents saved in the .XML, .DOCX, or .DOCM formats that contain custom XML. Those formats were at the heart of the patent dispute. DOCX is the default format for the most current version of Word, which is included in Microsoft Office 2007.

Custom XML is used by businesses to link their corporate data to Word documents. The patent, No. 5,787,449, describes how programs go about "manipulating a document's content and architecture separately."

Microsoft Office, which includes Word, PowerPoint, and Excel, accounted for more than $3 billion in worldwide sales in the company's most recent fiscal year and is used by literally millions of businesses and consumers for everyday tasks like word processing and spreadsheet creation.

Application mobilization tools are both more effective and more confusing than ever. To develop this report, InformationWeek Analytics polled nearly 700 business technology professionals and interviewed mobile application experts. Download the report here (registration required).d

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
News
Former CISA Director Chris Krebs Discusses Risk Management & Threat Intel
Kelly Sheridan, Staff Editor, Dark Reading,  2/23/2021
Edge-DRsplash-10-edge-articles
Security + Fraud Protection: Your One-Two Punch Against Cyberattacks
Joshua Goldfarb, Director of Product Management at F5,  2/23/2021
News
Cybercrime Groups More Prolific, Focus on Healthcare in 2020
Robert Lemos, Contributing Writer,  2/22/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: "The truth behind Stonehenge...."
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Building the SOC of the Future
Building the SOC of the Future
Digital transformation, cloud-focused attacks, and a worldwide pandemic. The past year has changed the way business works and the way security teams operate. There is no going back.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-1936
PUBLISHED: 2021-03-02
A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4.
CVE-2021-27904
PUBLISHED: 2021-03-02
An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the "all org" flag sometimes provided view access to unintended actors.
CVE-2021-27901
PUBLISHED: 2021-03-02
An issue was discovered on LG mobile devices with Android OS 11 software. They mishandle fingerprint recognition because local high beam mode (LHBM) does not function properly during bright illumination. The LG ID is LVE-SMP-210001 (March 2021).
CVE-2021-21321
PUBLISHED: 2021-03-02
fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server. In fastify-reply-from before version 4.0.2, by crafting a specific URL, it is possible to escape the prefix of the proxied backend service. If the base url of the proxied server is &...
CVE-2021-21322
PUBLISHED: 2021-03-02
fastify-http-proxy is an npm package which is a fastify plugin for proxying your http requests to another server, with hooks. By crafting a specific URL, it is possible to escape the prefix of the proxied backend service. If the base url of the proxied server is `/pub/`, a user expect that accessing...