October 10th, 2007 
admin Well, sometimes it seems that yours truly and super collegiate wonder boy (ie, billy) are joined at the medulla oblongata. On the heels of his recent post, I would like to offer to our readers notice of an exceptionally nasty Word vulnerability. MS07-060 security bulletin states that this exploit allows “remote code execution if a user opens a specially crafted Word file with a malformed string.”
This is a privately reported vulnerability, but it is being actively exploited. The following versions are affected:
Microsoft Office 2000
Microsoft Office 2004 for Mac
Microsoft Office XP
Microsoft Word 2000
Microsoft Word 2002
The solution is to apply the following patches:
Microsoft Office 2000 SP3:
http://www.microsoft.com/downloads/de…=8B3072FB-5933-47F7-A498-13A93E268E57
Microsoft Office XP SP3:
http://www.microsoft.com/downloads/de…=D6B787BB-03FF-4F67-8B69-6011FB18BA75
Microsoft Office 2004 for Mac:
http://www.microsoft.com/mac/downloads.aspx#Office2004
Sources: Microsoft Security Bulletin MS07-060 & Secunia
Posted in 
