‫ Microsoft Office Word RTF "listoverridecount" Parsing Vulnerability

IRCAD2012122359
ID: IRCAD2012122359
Release Date: 2012-12-11
Criticality level: Highly critical
 
Software:
Microsoft Office 2003 Professional Edition
Microsoft Office 2003 Small Business Edition
Microsoft Office 2003 Standard Edition
Microsoft Office 2003 Student and Teacher Edition
Microsoft Office 2007
Microsoft Office 2010
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats
Microsoft Office Web Apps
Microsoft Office Word Viewer
Microsoft SharePoint Server 2010
 
Description:
A vulnerability has been reported in Microsoft Office, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to an error when parsing Rich Text Format (RTF) data related to the listoverridecount and can be exploited to corrupt memory.
Successful exploitation allows execution of arbitrary code.
 
Solution
Apply updates.
 
Microsoft Office 2003 Service Pack 3
Microsoft Office 2007 Service Pack 2
Microsoft Office 2007 Service Pack 3
Microsoft Office 2010 Service Pack 1 (32-bit editions)
Microsoft Office 2010 Service Pack 1 (64-bit editions)
Other Microsoft Office Software
Software
 
References:
MS12-079 (KB2687412, KB2760405, KB2760410, KB2760416, KB2760421, KB2760497, KB2760498):
 
Secunia:

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 22 آذر 1391

امتیاز

امتیاز شما
تعداد امتیازها:0