Tweet
What is this alert?
This alert is to notify you that Microsoft has releasedSecurity Advisory (925059) Vulnerability in Word Could Allow Remote Code Execution - on 06 September 2006<O
</O
<O</O
Summary:<O</O
Microsoft is investigating new public reports of limited “zero-day†attacks using a vulnerability in Microsoft Word 2000. In order for this attack to be carried out, a user must first open a malicious Word file attached to an e-mail or otherwise provided to them by an attacker.<O</O
Opening the Word document out of email will prompt the user to be careful about opening the attachment.<O</O
Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This may include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs.<O</O<O</O
Recommendations: <O</O
<O</O
Do not open or save Microsoft Word files that you receive from un-trusted or that are received unexpected from trusted sources. This vulnerability could be exploited when a user opens a file.<O</O
<O</O
Review Microsoft Security Advisory 925059 for an overview of the issue, details on affected components, mitigating factors, suggested actions, frequently asked questions (FAQ) and links to additional resources. <O</O
<O</O
Customers who believe they have been attacked should contact their local FBI office or report their situation to www.ic3.gov.Customers outside the <?XML:NAMESPACE PREFIX = U1 /><U1:COUNTRY-REGION u2:st="on"><U1<?xml:namespace prefix = st1 ns = "urn:schemas-microsoft-com
U.S. </U1:COUNTRY-REGION></st1:country-region>should contact the national law enforcement agency in their country.<O</O
<O</O
Customers who believe they are affected can contact Product Support Services. Contact Product Support Services in North America for help with security update issues or viruses at no charge using the PC Safety line (1866-PCSAFETY) and international customers by using any method found at this location: http://support.microsoft.com/security. <O</O
<O</O
Additional Resources: <O</O
<O</O
·Microsoft Security Advisory (925059) Vulnerability in Word Could Allow Remote Code Execution http://www.microsoft.com/technet/security/advisory/925059.mspx<O</O
<O</O
·Microsoft Knowledgebase Article (925059) Vulnerability in Word Could Allow Remote Code Execution<O</O
·MSRC Blog: http://blogs.technet.com/msrc/<O</O
<O</O
Note: check the MSRC Blog periodically as new information may appear there.
This alert is to notify you that Microsoft has releasedSecurity Advisory (925059) Vulnerability in Word Could Allow Remote Code Execution - on 06 September 2006<O
</O<O
</OSummary:<O
</OMicrosoft is investigating new public reports of limited “zero-day†attacks using a vulnerability in Microsoft Word 2000. In order for this attack to be carried out, a user must first open a malicious Word file attached to an e-mail or otherwise provided to them by an attacker.<O
</OOpening the Word document out of email will prompt the user to be careful about opening the attachment.<O
</OUpon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This may include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs.<O
</O<O</ORecommendations: <O
</O<O
</ODo not open or save Microsoft Word files that you receive from un-trusted or that are received unexpected from trusted sources. This vulnerability could be exploited when a user opens a file.<O
</O<O
</OReview Microsoft Security Advisory 925059 for an overview of the issue, details on affected components, mitigating factors, suggested actions, frequently asked questions (FAQ) and links to additional resources. <O
</O<O
</OCustomers who believe they have been attacked should contact their local FBI office or report their situation to www.ic3.gov.Customers outside the <?XML:NAMESPACE PREFIX = U1 /><U1:COUNTRY-REGION u2:st="on"><U1
<?xml:namespace prefix = st1 ns = "urn:schemas-microsoft-com</O<O
</OCustomers who believe they are affected can contact Product Support Services. Contact Product Support Services in North America for help with security update issues or viruses at no charge using the PC Safety line (1866-PCSAFETY) and international customers by using any method found at this location: http://support.microsoft.com/security. <O
</O<O
</OAdditional Resources: <O
</O<O
</O·Microsoft Security Advisory (925059) Vulnerability in Word Could Allow Remote Code Execution http://www.microsoft.com/technet/security/advisory/925059.mspx<O
</O<O
</O·Microsoft Knowledgebase Article (925059) Vulnerability in Word Could Allow Remote Code Execution<O
</O·MSRC Blog: http://blogs.technet.com/msrc/<O
</O<O
</ONote: check the MSRC Blog periodically as new information may appear there.
