Trilight Zone

[tricore]

According to security vendor eEye Digital Security, there's a new buffer-overflow flaw within Microsoft Word that could crash a computer and allow an outsider to run malicious code on a vulnerable PC. Affected versions include Word 2000, Word XP, Word 2003, and the free Word Viewer 2003. Attacks are currently limited. This is the third new vulnerability to affect Microsoft Word within the last week. Because the vulnerability exploited is brand new, there is no patch available, nor has Microsoft offered comment on the reports from eEye and other security vendors. In order for this attack to be successful, the end user must first open the infected Word document. Do not open or save Word documents from untrusted sources, such as e-mail or Web sites. News.com's Dawn Kawamoto has more details.