 |
 |
Here we are only a week later, and there's yet another zero-day vulnerability in Word. Not actually an attack yet, but it probably won't take long. http://news.yahoo.com/s/zd/20061214/tc_zd/196431 > -----Original Message----- > From: MSU Network Administrators Group > [mailto:[log in to unmask]] On Behalf Of Richard Wiggins > Sent: Friday, December 08, 2006 9:56 AM > To: [log in to unmask] > Subject: Re: [MSUNAG] Apparently a zero-day attack using Word > is happening > > From what I've read this is not very widespread, but it is > occurring against specific targets -- organizations and > individuals. You receive an e-mail spoofing someone within > your organization. It has a Word attachment. You open it, > and your computer is infected. > > The advice from Microsoft is not to open Word documents from > anyone, even trusted senders. Only open Word documents you > are expecting from trusted senders. This is another reason > why people should use PDF for formatted announcements, and > only send Word documents if they intend for the recipient to > edit them. > > The press is speculating that Microsoft may not have a patch > ready for the next Patch Tuesday. > > /rich > > On 12/8/06, Cheryl Akers <[log in to unmask]> wrote: > > Published: December 5, 2006 > > http://www.microsoft.com/technet/security/advisory/929433.mspx > > > > Microsoft is investigating a new report of limited zero-day attacks > > using a vulnerability in Microsoft Word 2000, Microsoft Word 2002, > > Microsoft Office Word 2003, Microsoft Word Viewer 2003, > Microsoft Word > > 2004 for Mac, and Microsoft Word v. X for Mac, as well as Microsoft > > Works 2004, 2005, and 2006. > > > > Also see > > > http://www.symantec.com/enterprise/security_response/weblog/2006/12/mi > > crosoft_word_0day_under_inve.html > > Cheryl > > > > Cheryl Akers, MS, CNA - [log in to unmask] Microcomputer Support - > > Microbiology and Molecular Genetics 2228C Biomedical > Physical Sciences > > Michigan State University East Lansing, MI 48824 > > > > 517-355-6463 X1514 > > > > "I try to take one day at a time, but sometimes, several > days attack > > me at once." > > Jennifer Unlimited > > >