Bugtraq: Re: MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook

[Ben Greenbaum <bgreenbaum () SECURITYFOCUS COM>]

"This may be exploited also by visiting a web page with IE or
opening/previewing HTML email message with Outlook."

While this sentence is accurate, it is misleading as this vulnerability
can be exploited via any delivery mechanism at all, including Netscape
Navigator, Netscape Messenger, ftp etc. As long as the file is delivered
and opened in a vulnerable version of Word/Access, it works.

Ben Greenbaum
Director of Site Content
SecurityFocus
http://www.securityfocus.com