This zero-day vulnerability and related attacks has been confirmed by Microsoft today. This issue affects to Word version 2000.
It is also reported that Word Viewer application is not affected.

As a workaround it is possible to avoid opening Word files from unrusted sources, including e-mail, Web pages, IMs etc.
It is reported that these malicious Word files has been hosted on Web sites too.

- Juha-Matti

[ reply ]