Highly Critical Zero Day bug on Microsoft Word

Oh darn. Here’s another one of those zero day bugs that gets pretty sneaky dropping Trojans all over your PC when you open an infected MS Word file. Be very careful as you might leave backdoors on your PC….Take heed indeed..Let’s hope Microsoft will release a patch for this on the next Patch Day - Tuesday, Sept. 12, 2006.
Symantec’s researchers said that they’d analyzed a sample of the in-the-wild attack and confirmed that it worked against a fully-patched edition of Office 2000 — Word 2000 is one of the applications bundled with that version of the Office suite — running on a fully-patched Windows 2000 machine.
“Although we have not been able to exploit other versions of Office with this specific sample, others may be affected by the vulnerability,” Symantec said in an alert issued to customers of its DeepSight threat system. The Cupertino, Calif.-based security vendor characterized the exploit as “reliable” and added that it was “mostly transparent to an end-user.”
If a Word 2000 user opens the malicious document attached to the attacker’s e-mail message, a Trojan horse drops another file onto the computer; that file (actually another Trojan) drops yet another file, this time a backdoor component which leaves the machine open to additional attack or misuse.






