Redmond (WA) - Microsoft has issued an advisory for a critical vulnerability in Microsoft Word that, while "very limited" in scope, could lead to damaging attacks without an official fix yet.
The software giant confirmed the vulnerability that was reported earlier this month from Ismael Briones, a researcher at antivirus company Panda. According to the reports, the vulnerability lies mainly within Microsoft's Jet Database Engine, which is used in the company's professional software applications like Access and Visual Basic.
By sending out a malicious Word document, an attacker could compromise the engine and overtake someone else's computer remotely. The victim would need to own the appropriate software and physically open the Word file for the vulnerability to have any effect. As such, Microsoft says the threat is "very limited."
Additionally, users running Windows Vista or Vista Service Pack 1, or Windows 2003 Service Pack 2 are immune from any attacks this threat could pose.
"Microsoft is investigating the public reports and customer impact. We are also investigating whether the vulnerability can be exploited through additional applications. Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers," said Microsoft in its advisory.
The company added that if necessary, it will release a special security update, however the problem will more likely be patched during Microsoft's regularly scheduled monthly update.
Stay On the Cutting Edge: Get the Tom's Hardware Newsletter
Join the experts who read Tom's Hardware for the inside track on enthusiast PC tech news — and have for over 25 years. We'll send breaking news and in-depth reviews of CPUs, GPUs, AI, maker hardware and more straight to your inbox.
Microsoft is switching RAM speed units in Task Manager — finally moving to the more technically correct MT/s
Pre-Memorial Day Sales 2024: Save on gaming laptops, CPUs, monitors and more
Lenovo ThinkPad P1 Gen 7 is the world's first laptop to sport LPCAMM2 memory — more compact, higher performance, lower power