Here we are only a week later, and there's yet another zero-day
vulnerability in Word. Not actually an attack yet, but it probably won't
take long.
http://news.yahoo.com/s/zd/20061214/tc_zd/196431
> -----Original Message-----
> From: MSU Network Administrators Group
> [mailto:[log in to unmask]] On Behalf Of Richard Wiggins
> Sent: Friday, December 08, 2006 9:56 AM
> To: [log in to unmask]
> Subject: Re: [MSUNAG] Apparently a zero-day attack using Word
> is happening
>
> From what I've read this is not very widespread, but it is
> occurring against specific targets -- organizations and
> individuals. You receive an e-mail spoofing someone within
> your organization. It has a Word attachment. You open it,
> and your computer is infected.
>
> The advice from Microsoft is not to open Word documents from
> anyone, even trusted senders. Only open Word documents you
> are expecting from trusted senders. This is another reason
> why people should use PDF for formatted announcements, and
> only send Word documents if they intend for the recipient to
> edit them.
>
> The press is speculating that Microsoft may not have a patch
> ready for the next Patch Tuesday.
>
> /rich
>
> On 12/8/06, Cheryl Akers <[log in to unmask]> wrote:
> > Published: December 5, 2006
> > http://www.microsoft.com/technet/security/advisory/929433.mspx
> >
> > Microsoft is investigating a new report of limited zero-dayattacks
> > using a vulnerability in Microsoft Word 2000, Microsoft Word 2002,
> > Microsoft Office Word 2003, Microsoft Word Viewer 2003,
> Microsoft Word
> > 2004 for Mac, and Microsoft Word v. X for Mac, as well as Microsoft
> > Works 2004, 2005, and 2006.
> >
> > Also see
> >
> http://www.symantec.com/enterprise/security_response/weblog/2006/12/mi
> > crosoft_word_0day_under_inve.html
> > Cheryl
> >
> > Cheryl Akers, MS, CNA - [log in to unmask] Microcomputer Support -
> > Microbiology and Molecular Genetics 2228C Biomedical
> Physical Sciences
> > Michigan State University East Lansing, MI 48824
> >
> > 517-355-6463 X1514
> >
> > "I try to take one day at a time, but sometimes, several
> days attack
> > me at once."
> > Jennifer Unlimited
> >
>
|