Secunia - Stay Secure
Gartner
Home Corporate Website Jobs Updated Mailing Lists RSS Blog  Online Shop Advertise
Software Inspectors
  Scan Online
  Personal (PSI)
  Network (NSI 2.0)

Solutions For
  Security Professionals
  Security Vendors

Free Solutions For
  Open Communities
  Journalists & Media

Secunia Advisories
  Search
  Historic Advisories
  Listed By Product
  Listed By Vendor
  Statistics / Graphs
  Secunia Research
  Report Vulnerability
  About Advisories

Virus Information
  Chronological List
  Last 10 Virus Alerts
  About Virus Information

Secunia Customers
  Customer Area


Microsoft Office URL File Location Handling Buffer Overflow Advisory Available in Danish 

Secunia Advisory: SA14177  
Release Date: 2005-02-08
Last Update: 2005-02-09

Critical:
Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch

Software:Microsoft Office XP
Microsoft PowerPoint 2002
Microsoft Project 2002
Microsoft Visio 2002
Microsoft Word 2002
Microsoft Works Suite 2002
Microsoft Works Suite 2003
Microsoft Works Suite 2004

CVE reference:CVE-2004-0848 (Secunia mirror)

Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS!


Description:
Rafel Ivgi has reported a vulnerability Microsoft Office XP, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within the process that passes URL file locations to Microsoft Office. This can be exploited to cause a buffer overflow when e.g. a Word document with an overly long, specially crafted URL is opened inside Internet Explorer.

Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, scan using the Network Software Inspector.

Solution:
Apply patches.

Microsoft Office XP Software (requires Service Pack 3):
http://www.microsoft.com/downloads/de...=A0115BF8-5F80-43E9-BE28-24D344600D69

Microsoft Office XP Software (requires Service Pack 2):
http://www.microsoft.com/downloads/de...=A0115BF8-5F80-43E9-BE28-24D344600D69

Microsoft Project 2002:
http://www.microsoft.com/downloads/de...=9FB0B8CC-593A-4955-9AF1-84AD2664E3AC

Microsoft Visio 2002:
http://www.microsoft.com/downloads/de...=07EB60C3-D38A-4130-BC44-6C8511ECADB9

Microsoft Works Suite 2002:
http://www.microsoft.com/downloads/de...=A0115BF8-5F80-43E9-BE28-24D344600D69

Microsoft Works Suite 2003:
http://www.microsoft.com/downloads/de...=A0115BF8-5F80-43E9-BE28-24D344600D69

Microsoft Works Suite 2004:
http://www.microsoft.com/downloads/de...=A0115BF8-5F80-43E9-BE28-24D344600D69

Provided and/or discovered by:
Rafel Ivgi, Finjan Software.

Changelog:
2005-02-09: Added link to US-CERT vulnerability note.

Original Advisory:
MS05-005 (KB873352):
http://www.microsoft.com/technet/security/bulletin/ms05-005.mspx

Other References:
US-CERT VU#416001:
http://www.kb.cert.org/vuls/id/416001



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

59 Related Secunia Security Advisories, displaying 10

1. Microsoft Word Unspecified Code Execution Vulnerability
2. Microsoft Access Snapshot Viewer ActiveX Control Vulnerability
3. Microsoft Publisher Object Handler Validation Vulnerability
4. Microsoft Word Two Code Execution Vulnerabilities
5. Microsoft Visio Two File Processing Vulnerabilities
6. Microsoft Project Unspecified Code Execution Vulnerability
7. Microsoft Office Web Components Two Vulnerabilities
8. Microsoft Office Two Code Execution Vulnerabilities
9. Microsoft Outlook "mailto:" URI Handling Vulnerability
10. Microsoft Office Object Parsing Memory Corruption Vulnerability

Show all related advisories


Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.








Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Do you think it's important to read Setup/User Guides for applications for use within your network?


See Results   


Most Popular Advisories

1.
BlackBerry Enterprise Server PDF Processing Vulnerability
2.
Sun Solaris System Management Agent SNMP Daemon Buffer Overflow
3.
Vim configure.in Insecure Temporary Files
4.
tplSoccerSite Multiple SQL Injection Vulnerabilities
5.
IBM WebSphere Application Server Unspecified Vulnerability
6.
MRO Maximo Information Disclosure and Cross-Site Scripting
7.
ArticleBeach Script "page" File Inclusion Vulnerability
8.
LunarNight Laboratory WebProxy Cross-Site Scripting
9.
Joomla DT Register Component "eventId" SQL Injection
10.
phpHoo3 "viewCat" SQL Injection Vulnerability





Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia