Microsoft Access - Malicious Exploit in-the-wild

Users should avoid unexpected MDB files found in email or offered as downloads for websites. They should also stay up-to-date on security patches and AV protection. Hopefully, this will be patched as part of the January security updates 

Active Exploitation Using Malicious Microsoft Access Databases
http://www.avertlabs.com/research/blog/index.php/2007/12/12/ms-access-exploit-in-the-wild/
http://www.us-cert.gov/current/index.html#microsoft_access_database_file_attachment

QUOTE: Online criminals are exploiting a flaw in the Microsoft Office Access database to install unauthorized software on computers, the United States Computer Emergency Readiness Team (US-CERT) has warned. In its brief warning, US-CERT offered few details on the attack, saying simply that the organization is "aware of active exploitation" of the problem by criminals who have sent specially crafted Microsoft Access Database (.mdb) files to victims.

Exploit based on Microsoft Jet DataBase Engine MDB File Parsing Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/26468
http://www.securityfocus.com/archive/1/483797