Identificada outra vulnerabilidade Microsoft Word

Categoria: Alertas

segunda, 11 dezembro 2006 10:28

Sistemas Operativos Implicados:	Windows XP/NT/2K/Me/98/95
Aplicações Implicadas:	Indefinido

Foi identificada mais uma vulnerabilidade de segurança no Microsoft Word, esta diferente da publicada a 06-12-2006 no site do CERT.PT Vulnerabilidade Microsoft Word.

I. Description

A vulnerability has been identified in Microsoft Word, which could be exploited by attackers to take complete control of an affected system. This flaw is due to a memory corruption error when handling a malformed document, which could be exploited by attackers to execute arbitrary commands by tricking a user into opening a specially crafted Word document.

Affected Products:
Microsoft Word 2000
Microsoft Word 2002
Microsoft Word 2003
Microsoft Word Viewer 2003

II. Solution

Do not open or save Word files received from un-trusted sources.
The FrSIRT is not aware of any official supplied patch for this issue.
Be alerted when new exploits, vulnerabilities, or patches related to these products are released. Subscribe to FrSIRT VNS.

III. References

http://www.frsirt.com/english/advisories/2006/4920
http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx