Public Exploit Code for Microsoft Works Vulnerabilities

US-CERT is aware of reports of publicly available exploit code for vulnerabilities in Microsoft Works 6 File Converter. By convincing a user to open a specially crafted Works file, an attacker may be able to execute arbitrary code on an affected system. This vulnerability was addressed in Microsoft Security Bulletin MS08-011.

US-CERT reminds users to review Microsoft Security Bulletin MS08-011 and apply any necessary updates or workarounds.