Description
Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.
References
- 20383 vdb-entry
- 20061010 ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability mailing-list
- 29428 vdb-entry
- SSRT061264 vendor-advisory
- ADV-2006-3981 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-06-034.html
- MS06-062 vendor-advisory
- 1017034 vdb-entry
- oval:org.mitre.oval:def:222 vdb-entry signature
- VU#534276 third-party-advisory
- 22339 third-party-advisory