Nearly undetectable Microsoft Office exploit

[pcalvert]

FYI:  Nearly undetectable Microsoft Office exploit installs malware without an email attachment

I think I'm going to get rid of (or disable) Outlook and Outlook Express.

 

[Tripredacus]

I think you can disable DDE... but... I don't see how this is a new thing. It was used to deliver virus/worm/whatever in the 90s. Even without attachments, since the main failing of (at least) Outlook Express (MSIMN) was that it would execute code in the view/preview window, including Javascript. You can find numerous examples of this online, a common reference point is that cleaned or malfunctioning virus would show an error with "DDE Server" messagebox.

So it has just been fixed now, there must have been some other reason and not having anything to do with Outlook or Outlook Express.