News

Forefront Bug Deletes Data in SharePoint Files

Microsoft last week described a problem with its Forefront enterprise security solution for SharePoint Server, cautioning that document data could get deleted as a result of the bug.

Users who run manual scans using Forefront Security for SharePoint are potentially at risk. Under certain conditions, the manual scans can cause memory leaks to occur. Over time, these memory leaks can lead to an even worse problem: document contents getting replaced with "deletion text."

Deletion text is what users typically see when Forefront Security for SharePoint has removed a virus or infected file. The reason the files get replaced is that normal documents can appear to be "exceedingly nested" as a result of the memory leaks, according to Microsoft's Forefront team.

Only manual scans will cause the problem. Real-time scans aren't affected by this bug.

The other factor that enables the bug is the use of "keyword lists." If IT pros do not set up keyword lists in Forefront Security for SharePoint, then no memory leaks will occur when running a manual scan, Microsoft's Forefront team explained.

The problem affects Forefront Security for SharePoint up to Service Pack 3 (SP3). However, even with SP3 installed, memory leaks will occur if keyword lists have been created and users run manual scans. Microsoft announced the release of SP3 for Forefront Security for SharePoint just last week.

Redmond is currently working to fix the memory leak problem. So if IT pros must run a manual scan using Forefront Security for SharePoint, Microsoft recommends disabling keyword filtering, which is the default setting for manual scans.

"This [disabling of keyword filtering] is extremely important, as manual scanning of your entire document library opens the potential of losing any document content incorrectly identified as 'exceedingly nested'," Microsoft's Forefront team warns.

In general, Microsoft recommends running a manual scan after first installing Forefront Security for SharePoint.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

  • Microsoft Appoints Althoff as New CEO for Commercial Business

    Microsoft CEO and chairman Satya Nadella on Wednesday announced the promotion of Judson Althoff to CEO of the company's commercial business, presenting the move as a response to the dramatic industrywide shifts caused by AI.

  • Broadcom Revamps VMware Partner Program Again

    Broadcom recently announced a significant update regarding its VMware Cloud Service Provider (VCSP) program, coinciding with the release of VMware Cloud Foundation (VCF) 9.0, a key component in Broadcom’s private cloud strategy.

  • Closeup of the new Copilot keyboard key

    Microsoft Updates Copilot To Add Context-Sensitive Agents to Teams, SharePoint

    Microsoft has rolled out a new public preview for collaborative "always on" agents in Microsoft 365 Copilot, bringing enhanced, context-aware tools into Teams channels, meetings, SharePoint sites, Planner workstreams and Viva Engage communities.

  • Windows 365 Cloud Apps Now Available for Public Preview

    Microsoft announced this week that Windows 365 Cloud Apps are now available for public preview. This aims to allow IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.