Security Advisory 2953095 for Microsoft Word 2010

[Corrine]

Microsoft released Security Advisory 2953095 which relates to a vulnerability in Microsoft Word. At this time, Microsoft is aware of limited, targeted attacks directed at Microsoft Word 2010.

With the vulnerability, an attacker could cause remote code execution if someone was convinced to open a specially crafted Rich Text Format (RTF) file or a specially crafted mail in Microsoft Outlook while using Microsoft Word as the email viewer.

Links to the Microsoft Fix it solution, other recommendations and references are available in my blog post at Security Advisory 2953095 for Microsoft Word 2010.

[Corrine]

If you installed the Fix it solution for the RTF vulnerability, after installing MS14-017, disable the Fix it so RTF files will render properly.

See my blog post at Microsoft Security Bulletin for April, 2014 for a link to disable the Fix it solution.