Hole in Microsoft Word for Windows and Mac Allows Attack from Internet   12/6/2006 - 1,472 views, 1 Comment

Summary: Microsoft has advised that they are working on investigating a vulnerability in Word for Windows and Mac which allows attackers to gain access to a user's home computer. All of the following version of Word are at risk: Microsoft Word 2000, Microsoft Word 2002, Microsoft Office Word 2003, Microsoft Word Viewer 2003, Microsoft Word 2004 for Mac, and Microsoft Word 2004 v. X for Mac, as well as Microsoft Works 2004, 2005, and 2006.

Previous Article « IE7 - Microsoft Internet Explorer 7 - Should You Install It?
Read Next Article » Online Maps and Directions Blamed for Man’s Death in Snowy Oregon

Microsoft has advised that they are working on investigating a vulnerability in Word for Windows and Mac which allows attackers to gain access to a user’s home computer.

In order for this attack to be carried out, a user must first open a malicious Word file attached to an e-mail or otherwise provided to them by an attacker. As a best practice, users should always exercise extreme caution when opening unsolicited attachments from both known and unknown sources,” advised Microsoft.

The way it works is that the attacker (the bad guy) either sends a Word file in email, or gets someone to visit a website hosting the malicious Word file and gets them to download it.

Once the malicious Word file is on the user’s computer, it takes advantage of the flaw in Microsoft Word, allowing the attacker access to the user’s computer.

Microsoft says that all of the following versions of Word are at risk: Microsoft Word 2000, Microsoft Word 2002, Microsoft Office Word 2003, Microsoft Word Viewer 2003, Microsoft Word 2004 for Mac, and Microsoft Word 2004 v. X for Mac, as well as Microsoft Works 2004, 2005, and 2006.

The best way to avoid having your computer compromised in this way is to use extreme caution in opening any file sent to you by anybody. If you aren’t expecting the file, don’t open it unless and until you first ask the sender whether they in fact sent it.

Previous Article « IE7 - Microsoft Internet Explorer 7 - Should You Install It?
Read Next Article » Online Maps and Directions Blamed for Man’s Death in Snowy Oregon

Get a FREE summary of the week's articles every Friday!
(You can stop it any time!)
    *We never share your email address with anyone

Email Address:
Date of first visit:
How you found us:

Be sure to watch for the confirmation email!

Subscribe
to The Internet Patrol on your cell phone    Email the link for this page to a friend!

Read more:

»  Security Hole in Microsoft Excel

»  Security Hole in Word Allows Attack Through Email with Ginwui.a Trojan

»  Microsoft Word Vulnerability Exploit Through Jet Database: Word Up on Security Hole

»  Microsoft Issues Nine New Security Updates and Patches Affecting Large Number of Windows Users

For additional similar stories check out our archives on Apple & Mac, Microsoft, Security, Windows

 

1 Comment »

  1. Typical lack of information : what exactly does the attacker do on a Macintosh computer ? Run a macro ? Macros can’t reach the protected levels of Mac OS X, so how could this flaw affect Mac security.

    Can we have some more information, please ?

    Comment by gregwah — 12/6/2006 @ 12:49 pm

RSS feed for comments on this post.

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
The Internet Patrol
Patrolling the Internet for You!