 |
 |
 |
|
| SecurityProNews > Insider Reports > Insider > Zero-Day Exploit Corrupts Microsoft Word |
[ insider_reports_insider ]Zero-Day Exploit Corrupts Microsoft Word
David Utter Staff Writer 2006-12-06  Insider Reports RSS Feed
Uses of Microsoft Office and Microsoft Works have been cautioned that a proof-of-concept exploit affecting the suites' word processing program has been observed in the wild.
The latest problem to plague Microsoft attacks Word, one of the most widely used applications on the planet. People have been advised to avoid opening or saving untrusted Word documents while Microsoft investigates the problem and works on a fix. "We are currently investigating a report of a proof of concept which may allow an attacker to execute code on a user's machine by convincing them to open a specially-crafted Word document," Alexandra Huft wrote on Microsoft's Security Response Center blog. "We are aware of limited attacks attempting to use the vulnerability reported." A Microsoft Security Advisory, 929433, has been posted to confirm the existence of the issue. It should be noted that the exploit can affect Word on Mac platforms as well as Windows. Security advisory firm Secunia described the problem as an Extremely Critical issue, the most severe of its ratings. The exploit can permit remote code execution on a vulnerable system. "The vulnerability is caused due to an unspecified error in the handling of Word documents can be exploited to cause a memory corruption," Secunia noted. Microsoft's spreadsheet program Excel has been a recent target of similar exploits, and also elicited the same caution from Microsoft in advising people to be wary of unsolicited documents arriving by email, or ones posted on untrusted websites. --- Tag: Microsoft Word Add to  Del.icio.us |  Digg |  Reddit |  Furl
Get all the updates - 
View All Articles by David Utter About the Author: David Utter is a business and technology writer for SecurityProNews and WebProNews. More insider_reports_insider Articles Insider Reports RSS Feed
|
|
 |
iEntry Featured Services: Jayde Member Services | Forums | Freeware | Advertise with Us |
 |
| Contact
Us | Advertise
| Newsletter
Archive | Sitemap
| Submit an
Article | News
Feeds SecurityProNews is an iEntry, Inc.® publication - 1998-2008 All Rights Reserved | Privacy Policy and Legal |
Join the WebProWorld Forums: Click Here |
|
|||||||||||||||||||||||||
