We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Exploit:Win32/Wordinvop
Aliases: No associated aliases
Summary
Exploit:Win32/Wordinvop is a detection for a specially-crafted Word file that exploits the vulnerability that described in CVE-2006-6456.
Such a specially-crafted Word document that contains an attacker's code might be sent to you as an email attachment. Viewing this attachment in your email client will not allow this threat to successfully exploit your computer, rather you have to open the Word document for the malicious code to run. Please exercise due diligence if you receive an email that does not look like it comes from a legitimate source.
Microsoft released an update to address this vulnerability, which is described in the following bulletin:
http://technet.microsoft.com/en-us/security/bulletin/ms07-014
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:
- Microsoft Security Essentials or, for Windows 8, Windows Defender
- Microsoft Safety Scanner
