Bug 42655 - : MSE said some doc files are trojan in source code tarball
Summary: : MSE said some doc files are trojan in source code tarball
Status: RESOLVED WORKSFORME
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
unspecified
Hardware: Other All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard: BSA
Keywords:
Depends on:
Blocks:
 
Reported: 2011-11-07 01:31 UTC by Siramizu
Modified: 2012-02-06 08:30 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:

Attachments
screenshot MSE (73.75 KB, image/png)
2012-01-06 22:47 UTC, Sean Huggans 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Siramizu 2011-11-07 01:31:50 UTC 
Problem description: 
The Microsoft Security Essentials treat some doc files as virus in the source

Steps to reproduce:
1. Open http://www.libreoffice.org/download/ with my Firefox
2. Click "Download the source code to build your own installer"
3. Download "libreoffice-writer-3.4.4.2.tar.bz2 7 MB"
4. Extract the tarball with 7zip

Current behavior:
Exploit:Win32/Agent.D
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2007-1347-1.doc

Trojan:Win32/Krashwod
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2006-3493-1.doc

Trojan:Win32/Wrdexp.A
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2008-2752-1.doc
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2008-2752-2.doc
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2008-2752-3.doc
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2008-2752-4.doc

Trojan:Win32/Controlwod.C
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2006-6628-1.doc

Then all files above has been deleted.

Note:
I just download this one, didn't check others.

Platform (if different from the browser): 
              
Browser: Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
Comment 1 Sean Huggans 2012-01-06 22:47:25 UTC 
Created attachment 55231 [details]
screenshot MSE
Comment 2 Sean Huggans 2012-01-06 22:48:14 UTC 
I had the same issue when downloading this source file.
Comment 3 Sean Huggans 2012-01-06 22:49:15 UTC 
note: this issue is still present with 3.4.5.2 version
Comment 4 sasha.libreoffice 2012-02-06 08:30:41 UTC 
no problem with Security Essentials now. Windows 7 32 bit, Essentials updated until now. (files from 3.6.0 version of LibreOffice)

Change status to WorksForMe
Please, if in versions 3.5.0 and 3.6.0 problem appears again, change status to Reopened