TexasCHLforum.com

Supposedly there's a Patch due tomorrow for Office due to a vulnerability that allows execution of code without user interaction:

http://www.theinquirer.net/inquirer/new ... ch-tuesday" onclick="window.open(this.href);return false;

That might be what hit you, Charles.

Keith B wrote: What mail program are you using??

This is key, if your email client auto-attempts to render HTML emails using an internal or external browser, then any browser vulnerabilities can be exploited simply by you opening the email.
Same with Word Documents and Excel Spreadsheets with macros. If the email client auto-displays them, or auto-opens then, then it can auto-infect you.

I'm not sure how many email clients do that with documents, but I know some out there like to auto-load HTML pages and images.

Best way is to set your email client to display plaintext only, and then switch to HTML if it's from a trusted source.