(New ?) Macro security hole in Word 97

[Bongard.Dominique () PMINTL CH (Bongard, Dominique)]

Hi,

I find something very annoying yesterday, and I found no reference about it
on security lists. So I will share it here.

System used: NT4.0, word97
Temp directory: C:\temp

What I did is create a word document with an AutoOpen macro.
I then saved the file in the temp and renammed it in :

C:\temp\Auto_Recovery_Of_something.asd

I then closed the session.

When the next user on my station opened word, the file was automatically
opened, and the macro executed without asking for any confirmation.

Has anyone ever heard of this one ?

Dominique Bongard

----------------------------------------------------------
"They that can give up liberty to obtain a little temporary safety deserve
neither liberty or safety" Benjamin Franklin