A vulnerability has been reported in Microsoft Word and Works Suite, which can be exploited by malicious people to execute arbitrary code on a user's system automatically.

The vulnerability is caused due to an error when checking the properties of modified documents thus making it possible to bypass the macro security model designed to restrict potentially malicious macros from executing on a user's system. This can be exploited by constructing a specially crafted document with an embedded macro and trick a user into opening the document.

Successful exploitation allows execution of arbitrary commands on a users system with the user's privileges via macros.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Jim Bassett

Original Advisory
Security Bulletin MS03-035:
http://www.microsoft.com/technet/security/bulletin/MS03-035.asp

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area