Description
Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.
References
- 28539 vdb-entry
- 1016787 vdb-entry
- http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-090219-2855-99
- SSRT061264 vendor-advisory
- 19835 vdb-entry
- MS06-060 vendor-advisory
- ADV-2006-3448 vdb-entry
- 20060906 Microsoft confirmed Word 0-day vulnerability mailing-list
- http://blogs.securiteam.com/?p=586
- ms-word-code-execution(28775) vdb-entry
- 21735 third-party-advisory
- Q925059 vendor-advisory
- 20060906 Re: Microsoft Word 0-day Vulnerability (September) FAQ document available mailing-list
- http://vil.mcafeesecurity.com/vil/content/v_119055.htm
- VU#806548 third-party-advisory
- http://www.microsoft.com/technet/security/advisory/925059.mspx
- 20060905 Microsoft Word 0-day Vulnerability (September) FAQ document available mailing-list
- oval:org.mitre.oval:def:578 vdb-entry signature
- http://isc.sans.org/diary.php?storyid=1669