Another Microsoft Word 2000 & XP Zero-Day

Microsoft Security Advisory (933052)
Vulnerability in Microsoft Word Could Allow Remote Code Execution
Published: February 14, 2007

Microsoft is investigating new public reports of very limited, targeted attacks against Microsoft Word “zero-day” using a vulnerability in Microsoft Office 2000 and Microsoft Office XP.

In order for this attack to be carried out, a user must first open a malicious Office file attached to an e-mail or otherwise provided to them by an attacker.

http://www.microsoft.com/technet/security/advisory/933052.mspx

--------------------------------------------------------

Check out the MSRC Blog entry on the subject as well.

Thanks to Fergie for the tip.

The "Zero-Day Wednesdays" trend keeps going & going & going.....