US-CERT - MS Word XP and 2003

National Cyber Alert System

Technical Cyber Security Alert TA06-139A


Microsoft Word Vulnerability

Original release date: May 19, 2006
Last revised: --
Source: US-CERT


Systems Affected

* Microsoft Word 2003
* Microsoft Word XP (2002)

Microsoft Word is included in Microsoft Works Suite and Microsoft
Office. Other versions of Word, and other Office programs may be
affected or act as attack vectors.

Details and workarounds at:

www.us-cert.gov...

Victor K.

Update: Trojan named "Backdoor.Ginwui" exploits this non-viral direct distribution vulnerability in Word that I wrote about on the 20th... Pocket-lint UK reports "that Symantec is not yet capable" but are working on a generic patch as it avoids spam filters. Be careful what Word attachments you open! MS is "working on it". Combine one of these babies with a Clickbot and someone's got a serious weapon...

[edit on 23-5-2006 by V Kaminski]