Description: A vulnerability has been reported in Microsoft Word and Works Suite, which can be exploited by malicious people to execute arbitrary code on a user's system automatically.
The vulnerability is caused due to an error when checking the properties of modified documents thus making it possible to bypass the macro security model designed to restrict potentially malicious macros from executing on a user's system. This can be exploited by constructing a specially crafted document with an embedded macro and trick a user into opening the document.
Successful exploitation allows execution of arbitrary commands on a users system with the user's privileges via macros.
Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, scan using the Network Software Inspector.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
