Security problem in Microsoft Word

Internet Week describes a problem with Word 2003 that crackers are trying to exploit.

Symantec raised its overall Internet alert Friday on the news that a zero-day vulnerability in Microsoft Word was being exploited by hackers hoping to hijack PCs.

The type of attack involved is successful against the newest version of Microsoft’s word processor, Word 2003, but only crashes Word 2000 and Word XP. Further details are

The attack, which Symantec dubbed “Trojan.Mdropper.H,” begins with an e-mail that offers an attached file that appears to be a Word document. Opening the document lets the Trojan execute; it then drops another piece of malware, “Backdoor.Ginwui,” onto the PC.

No patch is likely for a while so be very careful with email bearing Word attachments.

Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically to your feed reader.

Comments

No comments yet.

Sorry, the comment form is closed at this time.