Description
Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Microsoft Word Document - Malformed Pointer (PoC) EDB-2922 · dos · Dec 12, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 21589 vdb-entry
- http://blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-reports.aspx
- 1017390 vdb-entry
- http://www.infoworld.com/article/06/12/13/HNthirdword_1.html
- http://www.milw0rm.com/sploits/12122006-djtest.doc
- 20061212 Re: Re: The newest Word flaw is due to malformed data structure handling mailing-list
- http://research.eeye.com/html/alerts/zeroday/20061212.html
- VU#996892 third-party-advisory
- ADV-2006-4997 vdb-entry
- http://blogs.securiteam.com/?p=763
- word-pointer-code-execution(30885) vdb-entry
- oval:org.mitre.oval:def:332 vdb-entry signature