Microsoft Word Zero-day Exploit

Anti-virus researches have announced that there is a new zero-day flaw in Microsoft Word that is already actively being exploited.  A successfully executed attack against this vulnerability could allow an attacker to gain full Administrative control over an affected system.

Microsoft has verified that the vulnerability exists in Word 2003 and Word XP and is planning to release a patch that addresses it on June 13, 2006.

For more information regarding this issue, please see the following:

http://www.eweek.com/article2/0,1895,1965042,00.asp
http://www.incidents.org/diary.php?storyid=1346

This message was brought to you by the Applied Security Task Force.  Contact us at:  safecomputing@ucla.edu.