Microsoft confirms Word 2000 flaw

After a zero-day attack earlier this week in which were exposed to Trojan horses, Microsoft has confirmed the existence of a new flaw in Word 2000, although it is still under investigation. In Microsoft Security Advisory #925059, the software giant suggests one attack scenario where victims are lured to a Web site hosting an infected Word 2000 document for download. As a workaround, Microsoft suggests opening unsolicited Word documents with the Microsoft Word Viewer 2003 instead. The free viewer, available here, is not vulnerable.