Microsoft Word fejlbehæftet data-struktur kode-eksekvering - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Microsoft Word fejlbehæftet data-struktur kode-eksekvering

Secunia Advisory:	SA23205
Udsendt:	2006-12-11
Sidste Opdt.:	2007-02-14

Kritisk:	Ekstremt kritisk
Betydning:	Systemadgang
Hvor:	Fra Internet
Løsning Status:	Producent Patch

Software:	Microsoft Office 2000 Microsoft Office 2003 Professional Edition Microsoft Office 2003 Small Business Edition Microsoft Office 2003 Standard Edition Microsoft Office 2003 Student and Teacher Edition Microsoft Office 2004 for Mac Microsoft Office XP Microsoft Word 2000 Microsoft Word 2002 Microsoft Word 2003 Microsoft Word Viewer 2003 Microsoft Works Suite 2004 Microsoft Works Suite 2005 Microsoft Works Suite 2006

CVE reference:	CVE-2006-6456 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Beskrivelse: Der er rapporteret en sårbarhed i Microsoft Word, som kan udnyttes af ondsindede personer til at kompromittere en brugers system. Sårbarheden skyldes en uspecificeret fejl under håndteringen af data-strukturerer. Dette kan udnyttes til at korrumpere hukommelsen via specielt udformede data-strukturer i et Word-dokument. NOTE: Sårbarheden udnyttes allerede aktivt. Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, scan using the Network Software Inspector. Løsning: Installér patches. Microsoft Word 2000 (med Office 2000 SP3): http://www.microsoft.com/downloads/de...=F1E61E6A-BE3D-4536-AF76-A11D5CE67199 Microsoft Word 2002 (med Office XP SP3): http://www.microsoft.com/downloads/de...=A1CA8DD7-0622-4D66-A85F-A6586545EF9D Microsoft Word 2003 (med Office 2003 SP2): http://www.microsoft.com/downloads/de...=882F8503-DA72-43C9-B556-A002EC58F289 Microsoft Word Viewer 2003: http://www.microsoft.com/downloads/de...=FB59798B-AFE2-4103-9991-CBDD7686F9AD Microsoft Works Suite 2004: http://www.microsoft.com/downloads/de...=A1CA8DD7-0622-4D66-A85F-A6586545EF9D Microsoft Works Suite 2005: http://www.microsoft.com/downloads/de...=A1CA8DD7-0622-4D66-A85F-A6586545EF9D Microsoft Works Suite 2006: http://www.microsoft.com/downloads/de...=A1CA8DD7-0622-4D66-A85F-A6586545EF9D Microsoft Office 2004 for Mac: http://www.microsoft.com/mac/ Rapporteret af / Kredit: Rapporteret som en 0-day. Producenten krediterer yderligere Shih-hao Weng, Information and Communication Security Technology Center. Forløb: 12-12-2006: Tilføjede CVE-reference. 13-02-2007: Tilføjede yderligere information fra Microsoft. Opdaterede løsningen. Original Advisory: MS07-014 (KB929434): http://www.microsoft.com/technet/security/Bulletin/MS07-014.mspx Microsoft: http://blogs.technet.com/msrc/archive...10/new-report-of-a-word-zero-day.aspx Andre Kilder: SA23232: http://secunia.com/advisories/23232/ US-CERT VU#166700: http://www.kb.cert.org/vuls/id/166700



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

60 Relaterede Secunia Advisories, displaying 10

1. Microsoft Excel kode eksekvering

2. Microsoft Word uspecificeret hukommelses-korrumpering

3. Microsoft Windows OLE Automation hukommelses-korrumpering

4. Microsoft XML Core Services "substringData()" heltals-overflow

5. Microsoft Excel rtWnDesk record hukommelses-korrumpering

6. Microsoft Excel flere kode-eksekveringssårbarheder

7. Microsoft Visio eksekvering af vilkårlige kode

8. Microsoft Office drawing-objekt kode-eksekvering

9. Microsoft Excel tre kode-eksekveringssårbarheder

10. Microsoft RichEdit OLE-dialog hukommelses-korrumpering

Vis alle relaterede advisories

Send Feedback to Secunia

Hvis du har ny information angående dette Secunia advisory eller et produkt i vores database, så send det venligst til os. Du kan sende det til os enten ved at bruge vores web formular eller ved at sende det til vuln@secunia.com. Ideer, foreslag og andet feedback er også meget velkommen.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Webex Meeting Manager WebexUCFObject ActiveX Control Buffer Overflow

2.	Contenido Unspecified File Inclusion Vulnerabilities

3.	csphonebook "letter" Cross-Site Scripting

4.	PowerDNS Malformed Queries Handling Weakness

5.	Gentoo update for libxslt

6.	CA Products Ingres Multiple Vulnerabilities

7.	HP-UX libc Denial of Service Vulnerability

8.	8e6 R3000 "Host" URL Filter Bypass Vulnerability

9.	Xoops Kshop Module "search" Cross-Site Scripting

10.	Gentoo update for dhcp