Microsoft Word Memory Vulnerability

By admin | Oct 10, 2007
If you are new here, you may want to subscribe to our feed.

Well, sometimes it seems that yours truly and super collegiate wonder boy (ie, billy) are joined at the medulla oblongata.  On the heels of his recent post, I would like to offer to our readers notice of an exceptionally nasty Word vulnerability.  MS07-060 security bulletin states that this exploit allows “remote code execution if a user opens a specially crafted Word file with a malformed string.”

This is a privately reported vulnerability, but it is being actively exploited.  The following versions are affected:

Microsoft Office 2000
Microsoft Office 2004 for Mac
Microsoft Office XP
Microsoft Word 2000
Microsoft Word 2002

The solution is to apply the following patches:

Microsoft Office 2000 SP3:
http://www.microsoft.com/downloads/de…=8B3072FB-5933-47F7-A498-13A93E268E57

Microsoft Office XP SP3:
http://www.microsoft.com/downloads/de…=D6B787BB-03FF-4F67-8B69-6011FB18BA75

Microsoft Office 2004 for Mac:
http://www.microsoft.com/mac/downloads.aspx#Office2004

Sources: Microsoft Security Bulletin MS07-060 & Secunia



Related Posts:

Microsoft Word Unspecified Vulnerability
I love that title. Talk about vague. It seems things are hush hush. But the gist of...

Word 2000 Extremely Critical Vulnerability
Secunia has issued an extremely critical vulnerability warning for Microsoft Word 2000. The vulnerability is actually a rework of...

Microsoft Excel Repair Mode Vulnerability
And yet again, Secunia has issued an extremely critical security warning. This time it involves a memory corruption issue...

Zero Day Word Code Execution Vulnerability
Secunia is reporting a zero day remote exploit within Microsoft Word. They seemed to have uncovered the exploit while...

Excel Remote Code Execution Zero Day
A zero day vulnerability is like a candy shop for hackers.  It allows them a proven vulnerability with no remedy. ...

Leave a Comment

If you would like to make a comment, please fill out the form below.

Name (required)

Email (required)

Website

Comments

© 2007 PaulTech Network, - Daily Blog Tips Themes