Microsoft warned on December 5th that an un-patched vulnerability in Microsoft Word is being used in targeted attacks. Read their security advisory.

As of 2/12/2007 there is not a patch to address this issue. The only real saving grace is the end user would have to open the file.