Secunia

Microsoft has issued patches for Microsoft Excel and Word. These fix two vulnerabilities allowing malicious people to execute arbitrary code on a user's system.

It is possible to create Excel documents, which can bypass the Macro security check in Microsoft Excel. This can be exploited by malicious people to execute arbitrary Macro code, which can perform the same actions as the current user.

The length of Macro names isn't properly verified in Word. This can be exploited to cause a buffer overflow, which may cause Word to crash and possibly allow arbitrary code execution.

This may be exploited automatically in Internet Explorer by a malicious website because Internet Explorer automatically launches the helper application, which is installed by Microsoft Office.

The security issue reported in Word is related to:
SA10020

Solution
Patches are available:
Further details available in Customer Area

Provided and/or discovered by
Kazuyuki Housaka

Original Advisory
Vulnerability in Microsoft Word and Microsoft Excel Could Allow Arbitrary Code to Run (831527)
http://www.microsoft.com/technet/security/bulletin/MS03-050.asp

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area