A vulnerability has been reported in Microsoft Word, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error when parsing malformed functions. This can be exploited to corrupt memory via a specially crafted function in a Word document.

Successful exploitation allows execution of arbitrary code.

NOTE: The vulnerability is currently being actively exploited.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Discovered as a 0-day.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS07-014 (KB929434):
http://www.microsoft.com/technet/security/Bulletin/MS07-014.mspx

Microsoft:
http://www.microsoft.com/technet/security/advisory/932114.mspx
http://blogs.technet.com/msrc/archive/2007/01/26/microsoft-security-advisory-932114-posted.aspx

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers