Microsoft Word 2000 Unspecified Code Execution Vulnerability(altamente critico)

ERCOLINO

Membro dello Staff
Amministratore
Registrato
3 Marzo 2003
Messaggi
254.232
Località
Torino
Secunia Advisory: SA21735
Release Date: 2006-09-05

Critical: Extremely critical
Impact: System access
Where: From remote
Solution Status: Unpatched

Software: Microsoft Office 2000
Microsoft Word 2000


Description:
A vulnerability has been reported in Microsoft Word 2000, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error when processing Word documents. This can be exploited to execute arbitrary code when a malicious document is opened.

NOTE: The vulnerability is being actively exploited.

The vulnerability is reported in Microsoft Word 2000 running on Windows 2000. Other versions may also be affected.

Solution:
Do not open untrusted Office documents.


Bollettino Secunia
 
Indietro
Alto Basso