Microsoft Office System bursts 0day vulnerabilities

Washington (reporter Li Bin) yesterday, Jinshan Poison Bully Cloud Security Center announced the interception of a "office0day" loophole, which exists in the Microsoft Office Software Office Web component of the OCW10.dll file, the vulnerability in office2000/2003/　　IE6 environment can be successfully triggered, once triggered, it will jump to the hacker designated server to execute download instructions, download a large number of Trojan horse, remote control Trojan, advertising programs wait until the user's computer to carry out various illegal operations. Jinshan Poison PA security expert Fu Xudong says the full version of Office users is easy to recruit, and the impact is relatively small for users who use thin-version office. Currently, Microsoft has no patch release for the flaw, but it confirms the vulnerability. Jinshan Poison PA safety expert Fu Xudong said that if the user is concerned about the vulnerability, you can delete the Officeweb component "Microsoft officexpwebcomponents" in the Order of "start-set-control Panel-Add removal program".