The vulnerability lies in a conversion tool used to convert Microsoft Works WPS files into Word RTF files The flaw could allow an attacker to remotely execute code on a user's system.
Microsoft repaired the vulnerability as part of its http://www.securecomputing.net.au/news/microsoft-releases-11-patches-for-17-vulnerabilities-six-critical.aspx" target="_blank">monthly security release on 12 February.
When the update was released Microsoft credited discovery of the flaw to iDefense, which in turn credited security researcher Damian Put.
Two days after the patch was released, a user by the name of 'chujwamwdupe' posted the sample exploit code to security site milw0rm.
The US Computer Emergency Response Teama urged users to protect against the vulnerability by installing Microsoft's most recent security update.
Exploit code targets Microsoft flaw
A security researcher has posted code for an exploit targeting a component of Microsoft Office..
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
iTnews State of Security Breakfast comes to Sydney
.png&h=140&w=231&c=1&s=0)
Promoted Content
From ambition to impact: The next era of government transformation.
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Protecting the Human Operating System: How Technology Teams Can Perform Under Pressure in an Always-On World
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
The AI era demands a new kind of network
iTnews Resilience, Rewired Breakfast
RIMPA Live Convention 2026
What’s Next?
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
.jpg&h=236&w=349&c=1&s=1)
