Secunia

Sylvain Roger has discovered a weakness in various Microsoft Office applications, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The weakness is caused due to insecure default permissions on some shared sections with the names "\BaseNamedObjects\Mso97SharedDg??????????". This makes it possible for an unprivileged user to crash or freeze other users' running Microsoft Office applications.

The weakness has been confirmed in various applications included in a fully updated Microsoft Office 2000. Other versions may also be affected.

Solution
Grant only trusted users access to affected systems.

Provided and/or discovered by
Sylvain Roger, Solucom.

Deep Links
Links available in Customer Area