Bug 42655 - : MSE said some doc files are trojan in source code tarball
Summary: : MSE said some doc files are trojan in source code tarball
Status: RESOLVED WORKSFORME
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version: unspecified
Hardware: Other All
: medium normal
Assignee: Not Assigned
QA Contact:
URL:
Whiteboard: BSA
Keywords:
Depends on:
Blocks:
 
Reported: 2011-11-07 01:31 UTC by Siramizu
Modified: 2012-02-06 08:30 UTC (History)
1 user (show)

See Also:
i915 platform:
i915 features:


Attachments
screenshot MSE (73.75 KB, image/png)
2012-01-06 22:47 UTC, Sean Huggans
Details

Description Siramizu 2011-11-07 01:31:50 UTC
Problem description: 
The Microsoft Security Essentials treat some doc files as virus in the source

Steps to reproduce:
1. Open http://www.libreoffice.org/download/ with my Firefox
2. Click "Download the source code to build your own installer"
3. Download "libreoffice-writer-3.4.4.2.tar.bz2 7 MB"
4. Extract the tarball with 7zip

Current behavior:
Exploit:Win32/Agent.D
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2007-1347-1.doc

Trojan:Win32/Krashwod
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2006-3493-1.doc

Trojan:Win32/Wrdexp.A
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2008-2752-1.doc
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2008-2752-2.doc
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2008-2752-3.doc
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2008-2752-4.doc

Trojan:Win32/Controlwod.C
file:E:\Temp\7zEB2.tmp\libreoffice-writer-3.4.4.2\sw\qa\core\data\ww8\pass\CVE-2006-6628-1.doc

Then all files above has been deleted.

Note:
I just download this one, didn't check others.

Platform (if different from the browser): 
              
Browser: Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
Comment 1 Sean Huggans 2012-01-06 22:47:25 UTC
Created attachment 55231 [details]
screenshot MSE
Comment 2 Sean Huggans 2012-01-06 22:48:14 UTC
I had the same issue when downloading this source file.
Comment 3 Sean Huggans 2012-01-06 22:49:15 UTC
note: this issue is still present with 3.4.5.2 version
Comment 4 sasha.libreoffice 2012-02-06 08:30:41 UTC
no problem with Security Essentials now. Windows 7 32 bit, Essentials updated until now. (files from 3.6.0 version of LibreOffice)

Change status to WorksForMe
Please, if in versions 3.5.0 and 3.6.0 problem appears again, change status to Reopened


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.