M$ <> Security

A security flaw in Microsoft's flagship word processing software could allow a document to hijack files from any Windows PC on which it's opened, the software giant said Thursday.

A would-be thief would have to take extraordinary care in setting up the scenario, however, including knowing the exact location and name of the desired file as well as persuading the victim to open, modify, save and then return the Word document to the sender.

The scheme works best under Word 97, but Word 2000 and 2002 could also be conscripted into service if the attacker can persuade a victim to print the document first, a Microsoft spokesperson said.

Click to expand...