Description
Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability."
References
- HPSBST02214 vendor-advisory
- 1018013 vdb-entry
- 20070508 Microsoft Word RTF File Parsing Heap Corruption Vulnerability third-party-advisory
- ADV-2007-1709 vdb-entry
- MS07-024 vendor-advisory
- TA07-128A third-party-advisory
- 34388 vdb-entry
- VU#555489 third-party-advisory
- 23836 vdb-entry
- oval:org.mitre.oval:def:1900 vdb-entry signature