Microsoft confirmed Word 0-day vulnerability



This zero-day vulnerability and related attacks has been confirmed by Microsoft today. This issue affects to Word version 2000.
It is also reported that Word Viewer application is not affected.

As a workaround it is possible to avoid opening Word files from unrusted sources, including e-mail, Web pages, IMs etc.
It is reported that these malicious Word files has been hosted on Web sites too.

- Juha-Matti



Relevant Pages

  • [Full-disclosure] Microsoft confirmed Word 0-day vulnerability
    ... This zero-day vulnerability and related attacks has been confirmed by Microsoft today. ... It is also reported that Word Viewer application is not affected. ... As a workaround it is possible to avoid opening Word files from unrusted sources, including e-mail, Web pages, IMs etc. ... It is reported that these malicious Word files has been hosted on Web sites too. ...
    (Full-Disclosure)
  • RE: RWW Issue
    ... Please backup your IIS settings first. ... Web Sites and Default Web Sites. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • [NT] Cumulative Security Update for Internet Explorer (MS05-020)
    ... A remote code execution vulnerability exists in Internet Explorer because ... * Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service ... Note Setting the level to High may cause some Web sites to work ...
    (Securiteam)
  • Re: 456. December violence (12/20/06)
    ... I learned that the MSN web sites are abandoned by microsoft. ... AOL and Microsoft are two big firms. ...
    (talk.politics.misc)
  • Re: utterly confused & really angry
    ... You cannot make sense of MSN web sites? ... Michael Stevens gives instructions on how to use Microsoft ... Outlook Express to connect to and post to Microsoft Newsgroups at this web ... using Windows XP "prettifications". ...
    (microsoft.public.windowsxp.newusers)