Tuesday, October 19, 2010

Microsoft Office Word: Document Stack Overflow Vulnerability

Users of Microsoft Office Word please be advised of a Document Stack Overflow vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com
CVE-2010-3214: Microsoft Office Word Document Stack Overflow Vulnerability
. AFFECTED PRODUCTS

---------------------------



Microsoft Office 2010

Microsoft Office 2007 Service Pack 2

Microsoft Office 2003 Service Pack 3

Microsoft Office 2002 Service Pack 3

Microsoft Office 2008 for Mac

Microsoft Office 2004 for Mac

Microsoft Office Web Apps

Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007

File Formats Service Pack 2

Open XML File Format Converter for Mac

Microsoft Word Viewer
. DESCRIPTION

---------------------



VUPEN Vulnerability Research Team discovered a critical vulnerability

in Microsoft Office Word.



The vulnerability is caused by a stack overflow error when processing

certain structures in a Word document, which could be exploited by remote

attackers to execute arbitrary code by tricking a user into opening a

specially crafted Word file.
Read more at www.criticalwatch.com
 

No comments:

Post a Comment