Microsoft has issued updates for Office 2008 and 2004. These new versions, respectively 12.1.3 and 11.5.2, “contain several improvements to enhance stability and performance. In addition, this update includes fixes for vulnerabilities that an attacker can use to overwrite the contents of your computer’s memory with malicious code.” Microsoft rates this vulnerability as “critical”, saying, “An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.”
Needless to say, we recommend that all Office users update their software as soon as possible.