This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

'ROP' exploit prevented in Microsoft

Hi All

I keep getting this error in all computers that have office 2013.

Excluding intercept x resolve the problem.

But I do want intercept x to work.

No exclusion (details exclude...) works.



This thread was automatically locked due to age.
  • still not working for one customer this morning AEST 0900

    Windows Version  Microsoft Windows 7 Professional SP1 x64   

    Office Version       Microsoft Office Home & Business 2013

    have applied the work around on this customer

     

    when can we see a real fix?

  • Hi Andrew,

    Thank you for your kind response. As per the updated KBA, We have rolled back the update released and hence positively, the issue should be no more. However if you still witness the issue, Kindly please do create a support ticket with us and we can confirm if the endpoints have failed to receive the update or the issue is still not addressed to your endpoints.

    Regards,

    Adithyan Thangaraj
    Community Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

  • This has affected around 25-30 of our 140 devices. A reboot did fix the issue for all devices except one PC.

    I have restarted this PC several times over the past day and the issue still exists. The only fix is to turn off Office protection for this device which isn't ideal as the device uses the sales@ email address and therefore receives quite a bit of spam.

    I've asked the user to remain vigilant when opening any emails with Excel and Word attachments, but this isn't ideal.

  • Hi LouiseWatson,

    Thank you for your kind response. May I request your available time via DM in order to take a look at this one machine further? A reboot has fixed the issue on all other endpoints which faced the issue since our roll back, released to address this issue, has removed the newer version thereby waiting for a reboot to take effect. However, There could be several reasons why this one machine would still be a trouble and hence I would like to investigate this further. In case you prefer creating a support ticket with us, kindly please visit this page for the same.

    Regards,

    Adithyan Thangaraj
    Community Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

  • Hi Adithyan

     

    Thank you for your reply. I have a ticket with Sophos to look into the issue.

    I've since discovered another PC that continuously fails to update, I suspect Friday's update was interrupted. I am currently gathering logs from this machine to send to Sophos.

     

    Thanks

    Louise