“The vulnerability affects systems running Windows 2000 and occurs when processing malicious Word 2000 documents, according to Secunia’s security advisory.
Security company Symantec, which several days ago detected the exploit, Trojan MDropper.Q, noted that it uses a two-step attack.
Trojan MDropper.Q exploits the Microsoft Word vulnerability to drop another file, a new variant of Backdoor.Femo, according to a security advisory by Symantec. ”
Here is some more Tech News from around the web:
- zCodec Video Codec Is a Trojan @ Slashdot
- FreeDOS 1.0 Released @ Slashdot
- Google Releases Tesseract as Open Source @ Slashdot
- Drive-by hacks from a suitcase @ CNet
- PCLinuxOS .93A (Big Daddy) Review @ ExtremeTech
- Reverse Time Clock Modification @ MAKE:Blog
- CA antivirus deletes Windows 2003 file @ CNET
- Ubuntu 6.06 Dapper Drake: Solving Hardware Compatibility @ MadPenguin
- Microsoft: Beating Apple at its Own Game @ OSWeekly
- Platform Flexibility: Corporations Are Not To Be Blamed @ CoolTechZone
- Windows vs. OS X: Stop the Silly Rivalry @ OSWeekly
- The Ten Common Myths of I.T. @ The TechZone/A>
- IFA Berlin, Germany 2006 — Pre-IFA Press Day @ HardwareZone
- The Trials and Tribulations of Buying Your Term Papers Online @ Futurelooks
- Scary laser reviewed @ Dan’s Data
- Giveaway/Contest 31: Two Cooler Master Mystique 631 Cases @ 3dGameMan
- Crazy PC Gives Away Saitek Eclipse II Illuminated Keyboard @ Overclockers Online
Source: CNet News.com
CNet reports on an Office flaw particluar to Word, that is running around in the wild. As opposed to many vulnerabilities, this one was not discovered by researchers in a lab, or a white hat playing with code. It is out there and it wants to munch your DNS.