Technical Information

Brief overview of the risk:
A remote code execution vulnerability exists in the way that Microsoft Office handles specially crafted Rich Text Format (RTF) files
Detailed Information on the risk:
The vulnerability could allow remote code execution if a user opens a specially crafted RTF file in Word or reads a specially crafted e-mail sent in the RTF format. An attacker who successfully exploited this vulnerability could take control of an affected system in the context of the currently logged-on user. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Further information on this exploit is available at : MS08-072