 |
 |
From what I've read this is not very widespread, but it is occurring against specific targets -- organizations and individuals. You receive an e-mail spoofing someone within your organization. It has a Word attachment. You open it, and your computer is infected. The advice from Microsoft is not to open Word documents from anyone, even trusted senders. Only open Word documents you are expecting from trusted senders. This is another reason why people should use PDF for formatted announcements, and only send Word documents if they intend for the recipient to edit them. The press is speculating that Microsoft may not have a patch ready for the next Patch Tuesday. /rich On 12/8/06, Cheryl Akers <[log in to unmask]> wrote: > Published: December 5, 2006 > http://www.microsoft.com/technet/security/advisory/929433.mspx > > Microsoft is investigating a new report of limited zero-day attacks using > a vulnerability in Microsoft Word 2000, Microsoft Word 2002, Microsoft > Office Word 2003, Microsoft Word Viewer 2003, Microsoft Word 2004 for Mac, > and Microsoft Word v. X for Mac, as well as Microsoft Works 2004, 2005, and > 2006. > > Also see > http://www.symantec.com/enterprise/security_response/weblog/2006/12/microsoft_word_0day_under_inve.html > Cheryl > > Cheryl Akers, MS, CNA - [log in to unmask] > Microcomputer Support - Microbiology and Molecular Genetics > 2228C Biomedical Physical Sciences > Michigan State University > East Lansing, MI 48824 > > 517-355-6463 X1514 > > "I try to take one day at a time, but sometimes, several days attack me > at once." > Jennifer Unlimited >