Secunia

James C. Slora has reported a vulnerability in Microsoft Word and Outlook, potentially allowing malicious people to gain system access.

The problem arises when Word is used to edit mails in Outlook. This can possibly be exploited to execute arbitrary code on a user's system if the user is tricked into forwarding a malicious email with an unclosed "<OBJECT>" tag. Reportedly, this can only be exploited when mails are forwarded.

This may also be possible to exploit through malicious HTML documents if edited in Word.

This issue may be related to:
SA9580

Solution
Do not use Word as the default mail editor.

Provided and/or discovered by
James C. Slora

Changelog
Further details available in Customer Area

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area