Description
Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc.
References
- 30975 third-party-advisory
- http://isc.sans.org/diary.html?storyid=4696
- http://www.microsoft.com/technet/security/advisory/953635.mspx
- TA08-225A third-party-advisory
- http://blogs.technet.com/msrc/archive/2008/07/08/vulnerability-in-microsoft-word-could-allow-remote-code-execution.aspx
- HPSBST02360 vendor-advisory
- ADV-2008-2028 vdb-entry
- oval:org.mitre.oval:def:5897 vdb-entry signature
- 30124 vdb-entry
- microsoft-word-unspecified-code-execution(43663) vdb-entry
- 1020447 vdb-entry