This zero-day vulnerability and related attacks has been confirmed by Microsoft today. This issue affects to Word version 2000.
It is also reported that Word Viewer application is not affected.
As a workaround it is possible to avoid opening Word files from unrusted sources, including e-mail, Web pages, IMs etc.
It is reported that these malicious Word files has been hosted on Web sites too.
- Juha-Matti
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Received on Sep 06 2006