1.

Solve : Microsoft Word Unspecified Code Execution Vulnerability - Extremely critical!!!?

Answer»

NO SOLUTION, yet!

TITLE:
Microsoft WORD Unspecified Code Execution Vulnerability

SECUNIA ADVISORY ID:
SA30975

VERIFY ADVISORY:
http://secunia.com/advisories/30975/

CRITICAL:
Extremely critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
Microsoft Office XP
http://secunia.com/product/23/
Microsoft Word 2002
http://secunia.com/product/2150/

DESCRIPTION:
A vulnerability has been reported in Microsoft Word, which can be
exploited by malicious people to compromise a USER's system.

The vulnerability is CAUSED due to an unspecified error and can be
exploited to cause memory corruption via a SPECIALLY crafted
document.

Successful EXPLOITATION allows execution of arbitrary code.

NOTE: According to the vendor, the vulnerability is currently being
actively exploited.

The vulnerability is reported in Microsoft Word 2002 SP3 and is
currently not believed to affect other versions.

SOLUTION:
The vendor suggests viewing Word documents in Microsoft Office Word
2003 Viewer or Microsoft Office Word 2003 Viewer SP3.
Still running Word 2000 on many of my machines, which I guess is not affected. However, I don't care for their current solution they have. How about the alternative solution of viewing the word document in an open source program like OpenOffice Writer.



Discussion

No Comment Found