Microsoft Word Unspecified Code Execution Vulnerability

pedantic · 11-12-2006, 13:44

Linky

Quote:

Critical: Extremely critical
Impact: System access
Where: From remote
Solution Status: Unpatched

Quote:

Description: A vulnerability has been reported in Microsoft Word, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error when processing Word documents. No more information is currently available.

According to Microsoft, this is a different vulnerability than:
SA23232

NOTE: The vulnerability is already being actively exploited.

Solution: Do not open untrusted Office documents.

Aragorn · 11-12-2006, 14:18

Thanks for that. Def one to watch out for!

Gareth · 15-12-2006, 17:49

Just for info, there's been a 3rd Word vuln announced this month too...

http://vil.nai.com/vil/content/v_vul27264.htm