A vulnerability has been identified in Microsoft Word, which could be exploited by attackers to take complete control of an affected system. This issue is due to a memory corruption error when handling a malformed document, which could be exploited by attackers to execute arbitrary commands by tricking a user into opening a specially crafted Word document.
Products: Office 2000 and XP
Exploits: Discovered as a 0-day. The vulnerability is currently being actively exploited.
A brand new Word vulnerability affecting the 2000 and XP versions has been discovered. Please continue to be careful with all Office documents you may find attached to email messages:
Microsoft Word - Memory Corruption Vulnerability being exploited