"The 'proof-of-concept macro virus' showed that it is possible to write a simple 'virus-like' program using OpenOffice.org's macro language," read the statement. "This is a known risk with any capable macro language. To mitigate against this risk, by default OpenOffice.org detects if a document contains macros, displays a warning, and will only run the macro if the user specifically agrees. This behavior conforms to industry best practice."
The statement went on to say that the suite won't be patched, and by implication, that the software's macro security feature won't be changed.
"The OpenOffice.org engineers take the security of the software very seriously, and will react promptly to any new issues [but] this 'proof-of-concept' virus is not new information, and does not require a software patch. Technically, it is not even a virus, as it is not 'self-replicating' - with OpenOffice.org's default settings, it cannot spread without user intervention."
Although technically correct -- by definition, a computer virus is malware that self-replicates -- the term is often extended to refer to other forms of malicious code, including non-replicating Trojan horses.
In fact, Stardustwants to be a virus, but is so poorly written that it won't replicate. Two variants have been seen in the wild by Kaspersky Labs so far; both are flawed. "Like the previous version, this one doesn't work either, suffering from the same severe programming errors," wrote a Kaspersky researcher on the company's blog Saturday.
5 Top Federal Initiatives For 2015As InformationWeek Government readers were busy firming up their fiscal year 2015 budgets, we asked them to rate more than 30 IT initiatives in terms of importance and current leadership focus. No surprise, among more than 30 options, security is No. 1. After that, things get less predictable.