Microsoft Warns Of Fourth Word Flaw - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
Software // Enterprise Applications
News
1/29/2007
12:23 PM
50%
50%

Microsoft Warns Of Fourth Word Flaw

Successful attacks require users to open a malformed Word 2000 file attachment or download one from a malicious Web site.

Microsoft is digging into the fourth unpatched vulnerability in Microsoft Word in the last two months, the company security team said.

The zero-day flaw, which was first publicized Friday by Symantec , lets attackers hijack PCs running Microsoft Word 2000, and crash machines with Word 2002 or 2003. Attacks already are under way.

Microsoft's Security Response Center (MSRC) posted a warning late Friday. "We are currently investigating a report of a posting of proof of concept code which could allow an attacker to execute code on a user's machine by convincing them to open a specially-crafted Word document," Alexandra Huft of the MSRC in a blog posting. "We are aware of very limited, targeted attacks attempting to use the vulnerability reported."

Successful attacks require users to open a malformed Word 2000 file attachment, or download and open such a document from a malicious Web site, said Microsoft.

The flaw is the fourth Word flaw to go unpatched. In early-to-mid December, Microsoft acknowledged three other Word vulnerabilities. None of those bugs were patched during the December or January regularly scheduled security updates.

In the Friday warning, Microsoft promised to patch the new Word 2000 zero-day flaw but set no timetable for producing a fix.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
Slideshows
IT Careers: 10 Industries with Job Openings Right Now
Cynthia Harvey, Freelance Journalist, InformationWeek,  5/27/2020
Commentary
How 5G Rollout May Benefit Businesses More than Consumers
Joao-Pierre S. Ruth, Senior Writer,  5/21/2020
News
IT Leadership in Education: Getting Online School Right
Jessica Davis, Senior Editor, Enterprise Apps,  5/20/2020
White Papers
Register for InformationWeek Newsletters
Video
Current Issue
Key to Cloud Success: The Right Management
This IT Trend highlights some of the steps IT teams can take to keep their cloud environments running in a safe, efficient manner.
Slideshows
Flash Poll