‫ Microsoft Products PAPX Section and listid Handling Vulnerabilities

IRCAD2012102234
 
ID: IRCAD2012102234
Release Date: 2012-10-09
Criticality level: Highly critical
 
Software:
Microsoft Office 2003 Professional Edition
Microsoft Office 2003 Small Business Edition
Microsoft Office 2003 Standard Edition
Microsoft Office 2003 Student and Teacher Edition
Microsoft Office 2007
Microsoft Office 2010
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats
Microsoft Office Web Apps
Microsoft Office Word 2007
Microsoft Office Word Viewer
Microsoft SharePoint Server 2010
Microsoft Word 2003
Microsoft Word 2010
 
Description:
Two vulnerabilities have been reported in multiple Microsoft products, which can be exploited by malicious people to compromise a user's system.
1) An error when parsing the PAPX section can be exploited to corrupt memory via a specially crafted Word file.
NOTE: This vulnerability affects Microsoft Word 2007 only.
2) A use-after-free error exists when handling listid and can be exploited via a specially crafted RTF file.
Successful exploitation of the vulnerabilities allows execution of arbitrary code.
 
Solution
Apply updates.
 
References:
MS12-064 (KB2742319, KB2687483, KB2687315, KB2553488, KB2687485, KB2687314, KB2598237, KB2687401)
 
Secunia:
 
 

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 19 مهر 1391

امتیاز

امتیاز شما
تعداد امتیازها:0