Unpatched Office attack reminds us: Don't click on risky docs

An attacker will have to convince you to click on the document as well as turn off Protected View.

- MARK HACHMAN

Microsoft is warning of a new Office vulnerability that is probably avoidable with smart Internet practices—namely, don’t open untrusted documents.

Researcher EXPMON reported a new vulnerability for Microsoft Office, the company said (go.pcworld.com/expm). Microsoft confirmed the vulnerability in a security update (go.pcworld.com/mcon). Microsoft has yet to issue a patch for it, although the company said it would “take the appropriate action to help protect our customers.”