Secunia Logo  


Secunia PSI WorldMap
 
Microsoft Word Two Code Execution Vulnerabilities
Secunia Advisory: SA30143
Release Date: 2008-05-13
Last Update: 2008-05-14
Popularity: 12,576 views

Critical:
Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch

Software:Microsoft Office 2000
Microsoft Office 2003 Professional Edition
Microsoft Office 2003 Small Business Edition
Microsoft Office 2003 Standard Edition
Microsoft Office 2003 Student and Teacher Edition
Microsoft Office 2004 for Mac
Microsoft Office 2007
Microsoft Office 2008 for Mac
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats
Microsoft Office Word 2007
Microsoft Office Word Viewer 2003
Microsoft Office XP
Microsoft Word 2000
Microsoft Word 2002
Microsoft Word 2003

Binary Analysis: BA474 :: Available for 1 Credit
BA475 :: Available for 1 Credit

Secunia CVSS-2 Score: Available in Secunia business solutions

Subscribe: Instant alerts on relevant vulnerabilities


Advisory Content (Page 2 of 3)[ 1 ] [ 2 ] [ 3 ]

Solution:
Apply updates.

Microsoft Office 2000 SP3:
http://www.microsoft.com/downloads/de...=9215ff71-38c0-416a-b89a-fe3474160f41

Microsoft Office XP SP3:
http://www.microsoft.com/downloads/de...=b348a518-221e-4567-a797-999715a8b2ef

Microsoft Office 2003 SP2/SP3:
http://www.microsoft.com/downloads/de...=bc33d144-f917-47b8-961f-744ca847e14c

2007 Microsoft Office System (optionally with SP1):
http://www.microsoft.com/downloads/de...=071ceaa2-12e3-4401-9331-2a54a93e2550

Microsoft Word Viewer 2003 (optionally with SP3):
http://www.microsoft.com/downloads/de...=bce7ea31-2bf0-4930-aff9-837bcc82a682
x?FamilyId=bce7ea31-2bf0-4930-aff9-837bcc82a682

Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats (optionally with SP1):
http://www.microsoft.com/downloads/de...=2d718f37-c5d1-4e15-a7e1-5a15fedef52f

Microsoft Office 2004 for Mac:
http://www.microsoft.com/downloads/de...=99F54471-CCF9-4D94-A882-A05ECD128ADC

Microsoft Office 2008 for Mac:
http://www.microsoft.com/downloads/de...=395D1487-A3A6-4106-A0F8-4D6E1D6D89D2

Provided and/or discovered by:
1) wushi, team509 via Zero Day Initiative (ZDI).
2) Jun Mao, iDefense Labs.

Changelog:
2008-05-14: Updated "Description" section based on additional information from iDefense Labs and ZDI. Added links to iDefense Labs, ZDI, and US-CERT.

Original Advisory:
MS08-026:
http://www.microsoft.com/technet/security/bulletin/ms08-026.mspx

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=700

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-08-023/

Other References:
US-CERT VU#543907:
http://www.kb.cert.org/vuls/id/543907

Change Page:
[ 1 ] [ 2 ] [ 3 ]



Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. SugarCRM Multiple Vulnerabilities // 56 views
2. Adobe Flash Player Multiple Vulnerabilities // 51 views
3. Ingate Firewall and SIParator Multiple Vulnerabilities // 49 views
4. Serenity "MplayInputFile()" M3U Playlist Buffer Overflow // 43 views
5. Sun Java JDK / JRE Multiple Vulnerabilities // 42 views
6. Internet Explorer Charset Inheritance Cross-Site Scripting Vulnerability // 41 views
7. Internet Explorer Layout Handling Memory Corruption Vulnerability // 41 views
8. Sun Solaris 8 LDAP Client Configuration Cache Daemon Denial of Service // 32 views
9. Debian update for poppler // 30 views
10. Sun Solaris BIND DNS Cache Poisoning Vulnerability // 30 views