During our testing (on Office 2010) the vulnerable system was fully exploited despite the fact that users were presented a dialog about the document containing 'links that may refer to other files' [and] user interaction was not required.