4 ms·

Well there goes half of .gov and .mil... (at least the agencies not forcing plain text email)

• yuhong 13y ago
  Fortunately, I think the current exploits rely on ActiveX controls which are disabled when reading Outlook RTF messages. In fact, I have seen no real world Word exploits using Outlook RTF messages, probably because spear phishing is effective enough.
  • firebones 13y ago
    The advisory says that Office for Mac 2011 is also affected, implying that it's not related to ActiveX controls.
    • yuhong 13y ago
      The bug is not related to ActiveX controls, but current exploits for this bug rely on one of them.