Zero-day Word exploit allows computers to be infected via e-mail attachments

1 min. read

Published onApril 9, 2017

published onApril 9, 2017

Share this article

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

A new zero-day exploit for Microsoft Word has been discovered that allows attackers to infect a machine with malware through e-mail attachments. Discovered by research firmFireEye, an attacker can send a malicious Microsoft Office RTF file to a user and, if opened, it will execute a Visual Basic script that has malicious code embedded, which then connects to known malware families.

The attack has been found to be being used openly in the wild and Microsoft has been aware of the issue for several weeks. The company has been working with FireEye to discuss a time to publicly disclose the issue and to create a patch, however, FireEye took the decision to disclose it earlier after another company similarly disclosed the same issue.

The only way of staying safe from this attack vector is to not open any suspicious e-mail attachments and, if possible, keep any attachments in the Protected view, as this prevents the arbitrary code from executing on the machine.

Radu Tyrsina

Radu Tyrsina has been a Windows fan ever since he got his first PC, a Pentium III (a monster at that time).

For most of the kids of his age, the Internet was an amazing way to play and communicate with others, but he was deeply impressed by the flow of information and how easily you can find anything on the web.

Prior to founding Windows Report, this particular curiosity about digital content enabled him to grow a number of sites that helped hundreds of millions reach faster the answer they’re looking for.

User forum

0 messages

Sort by:LatestOldestMost Votes

Comment*

Name*

Email*

Commenting as.Not you?

Save information for future comments

Comment

Radu Tyrsina

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low#

Copilot in Outlook will generate personalized themes for you to customize the app#

Microsoft will raise the price of its 365 Suite to include AI capabilities#

Death Stranding Director’s Cut is now Xbox X|S at a huge discount#

Outlook will let users create custom account icons so they can tell their accounts apart easier#

Zero-day Word exploit allows computers to be infected via e-mail attachments#

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low

Copilot in Outlook will generate personalized themes for you to customize the app

Microsoft will raise the price of its 365 Suite to include AI capabilities

Death Stranding Director’s Cut is now Xbox X|S at a huge discount

Outlook will let users create custom account icons so they can tell their accounts apart easier

Zero-day Word exploit allows computers to be infected via e-mail attachments