In an advisory issued Tuesday, Microsoft reported that an attacker could attach a specially-crafted Word document to an email or infect a PC via a malicious website containing such a document.
Microsoft Office flaws, many exploited just after Patch Tuesday, have become common in recent months.
The just-discovered flaw exists in Word versions 2000, 2002, 2003, Word Viewer 2003, Word 2004 for Mac, Word 2004 X for Mac, and Microsoft Works versions 2004, 2005 and 2006.
The vulnerability, rated "extremely critical," is caused by an unspecified error in the handling of Word documents and can be exploited to cause memory corruption, according to vulnerability monitoring clearinghouse Secunia.
The Redmond, Wash. company advised users to practice extreme caution when opening Word documents attached to email.
Microsoft is investigating reports of a proof-of-concept exploit for the flaw, according to a post written today by researcher Alexandra Huft on the Microsoft Security Response Center blog.
Click here to email Frank Washkuch Jr.
Attackers aim for Microsoft Word flaw
Microsoft this week warned Office users that attackers are exploiting a zero-day flaw in Microsoft Word.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.jpg&h=140&w=231&c=1&s=0)
Partner Content
Who owns your brand’s AI reputation?
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Protecting the Human Operating System: How Technology Teams Can Perform Under Pressure in an Always-On World
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership
iTnews State of Security Breakfast comes to Sydney
.png&w=100&c=1&s=0)
Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
