|
Answer» NO SOLUTION, yet!
TITLE: Microsoft WORD Unspecified Code Execution Vulnerability
SECUNIA ADVISORY ID: SA30975
VERIFY ADVISORY: http://secunia.com/advisories/30975/
CRITICAL: Extremely critical
IMPACT: System access
WHERE: >From remote
SOFTWARE: Microsoft Office XP http://secunia.com/product/23/ Microsoft Word 2002 http://secunia.com/product/2150/
DESCRIPTION: A vulnerability has been reported in Microsoft Word, which can be exploited by malicious people to compromise a USER's system.
The vulnerability is CAUSED due to an unspecified error and can be exploited to cause memory corruption via a SPECIALLY crafted document.
Successful EXPLOITATION allows execution of arbitrary code.
NOTE: According to the vendor, the vulnerability is currently being actively exploited.
The vulnerability is reported in Microsoft Word 2002 SP3 and is currently not believed to affect other versions.
SOLUTION: The vendor suggests viewing Word documents in Microsoft Office Word 2003 Viewer or Microsoft Office Word 2003 Viewer SP3.Still running Word 2000 on many of my machines, which I guess is not affected. However, I don't care for their current solution they have. How about the alternative solution of viewing the word document in an open source program like OpenOffice Writer.
|