Check Point Advisories

Preemptive Protection Against Zero-Day Vulnerability in Microsoft Word 2000 (925059)

Check Point Reference:	CPAI-2006-108
Date Published:	12 Sep 2006
Severity:	Low
Last Updated:	Thursday 03 May, 2007
Source:	Microsoft Security Advisory (925059)
Industry Reference:	CVE-2006-4534
Protection Provided by:
Who is Vulnerable?	Microsoft Word 2000
Vulnerability Description	A zero-day code execution vulnerability exists in Microsoft Word 2000. To exploit this vulnerability, a remote attacker must convince a user to open a maliciously crafted Word document that contains a Trojan horse referred to as Trojan.Mdropper.Q.
Vulnerability Details	When a malicious Word file containing Trojan.Mdropper.Q is opened, it activates the Trojan horse. The Trojan installs a backdoor on the infected system and then deletes itself.