"To become open to attack a user must open a malicious Word document sent in
an e-mail attachment. The Word vulnerability potentially allows remote
attackers to take over a user's machine."
Anyone who opens attachments without knowing about them is a fool.
According to what I have read the e mails are spoofed to appear to
originate from a known source. It does not matter how many times you
tell users not to open attachments unless they know exactly what they
are, they always do, in fact why should they give a toss its not their
job to maintain the PCs is it? E mailed Word docs are also very
common in corporate environments which makes this worse but the very
worst thing is that MSFT are not going to fix it for 3 weeks.
Pretty quick and prompt with WGA updates and sticking beta WGA notify
tools on everybodies machines as a "critical update" but they can't be
arsed to post a fix for this "extremely critical" word security hole.
Also calling people fools for opening attachments is not very helpful,
not all people are experienced PC hackers a hell of a lot don't care
they just want to use the things.
The only "fools" are at Redmond.
Jonah