RAFINO

The Retired Army Finance Organization
"Keeping the Finance Family Together"

Text Size:

Login Saturday, June 24, 2017

MS Word Vulnerability

1993, 4/10/2017

Warning: A new "booby trap" has been discovered in Word documents that are atteched in emails.

People should be highly suspicious of any Word document that arrives in an e-mail, even if the sender is well known. The attacks observed by McAfee are unable to work when a booby-trapped document is viewed in an Office feature known as Protected View. Those who choose to open an attached Word document should exercise extreme caution before disabling Protected View. There's no word yet if use of Microsoft's Enhanced Mitigation Experience Toolkit prevents the exploit from working.

See the link below for the gory details.

https://arstechnica.com/security/2017/04/booby-trapped-word-documents-in-the-wild-exploit-critical-microsoft-0day/