Wordpad - security and file association
Hi everyone. This is Leonardo (Leo) from Brazil. What I am going to report seems like a bug. As we all know Wordpad in Windows 7 suffered some good changes (UI and options) including a security feature that resembles Office 2010 protected mode : documents originating from the internet zone have all kind of active content (even bitmap images, if they are inserted as 'Embedded Objects') blocked and a yellow bar that allows the user to opt either to allow or keep it that way. Sometimes "rich" content is needed and the user will click the yellow bar and allow it. But, there is a bug within Wordpad documents embedded in Office programs such as Excel, Powerpoint and Word : When you open them (by eg. double clicking) they do not present any "rich" (or active content as it calls) plus it does not present the yellow bar, giving the user no option. I guess it would not be a major risk if the active/rich content was shown normally since : 1) The Office document, if originated from the internet, already presents the user with an yellow bar to allow the active content, so if the user allows it, in theory he/she wishes to display the active content. 2) the user still needs to double click the embedded wordpad document to open it in Wordpad and 'run' any active content inside it. Having this in mind, I guess the correct thing Wordpad should do is either checking the Office document origin and present the yellow bar, or automatically enable active content since the user already opted to enable in the Office document. Too much warnings/blockings makes things annoying for the majority of users, even for the experts. The intermediate/experts users may simply unregister embeddable objects they dont normally use or need, install a decent Antivirus, keep firewalls enabled and finally for the most paranoid guys, install a program that protects against code execution when memory vulns are exploited such as integer/buffer overflows. Also, some documents gets displayed differently (text position/formatting, images...) between Microsoft Word and Wordpad, so I guess a file extension exclusively for Wordpad should remain even when Office is installed. Could be the old and well known ".WRI" or possibly ".WPAD", etc.
September 20th, 2012 3:59pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics