Microsoft Office Word: Return Value Handling Vulnerability

Users of Microsoft Office Word please be advised of a Return Value Handling vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com

CVE-2010-3215: Microsoft Office Word Return Value Handling Vulnerability

. AFFECTED PRODUCTS --------------------------- Microsoft Office 2004 for Mac Microsoft Office 2002 Service Pack 3

. DESCRIPTION --------------------- VUPEN Vulnerability Research Team discovered a critical vulnerability in Microsoft Office Word. The vulnerability is caused by an error when handling return values while parsing certain data in a Word document, which could be exploited by remote attackers to execute arbitrary code by tricking a user into opening a specially crafted Word file. Read more at www.criticalwatch.com

 

See this Amp at http://amplify.com/u/dbla