Vulnerability

CERT-In Vulnerability Note CIVN-2005-0063
Vulnerability in Microsoft Word Could Allow Remote Code Execution

Original Issue Date:July 13, 2005

Severity Rating: HIGH

Software Affected

Microsoft Office 2000
Microsoft Office XP
Microsoft Word 2000
Microsoft Word 2002
Microsoft Works Suite 2001
Microsoft Works Suite 2002
Microsoft Works Suite 2003
Microsoft Works Suite 2004

Overview

A vulnerability has been reported in Microsoft Word which could be exploited by an attacker by creating a malicious document and enticing a user to open the same. Successful exploitation enables the attacker to execute arbitrary code in the context of the user.

Description

This vulnerability is caused due to a boundary error within the parsing of fonts by MS Word. To exploit the vulnerability a remote user can create a specially crafted .doc file, containing long font information.

When this document is processed by MS-Word a stack-based buffer overflow is triggered. This enables the attacker to run arbitrary code with the privileges of the target user.

Solution

Apply appropriate patches as mentioned in Microsoft Security Bulletin MS05-035

Vendor Information

Microsoft

http://www.microsoft.com/technet/security/bulletin/MS05-035.mspx

References

iDEFENSE Security Advisory
http://www.idefense.com/applicat...?id=281&type=vulnerabilities

Secunia Advisory
http://secunia.com/advisories/15998/

CVE Name
CAN-2005-0564

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-2436857

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India