Secunia Logo  


Secunia PSI WorldMap
 
Microsoft Office Word Two Vulnerabilities
Secunia Advisory: SA35377
Release Date: 2009-06-09
Last Update: 2009-06-11
Popularity: 7,534 views

Critical:
Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch

Software:Microsoft Office 2000
Microsoft Office 2003 Professional Edition
Microsoft Office 2003 Small Business Edition
Microsoft Office 2003 Standard Edition
Microsoft Office 2003 Student and Teacher Edition
Microsoft Office 2004 for Mac
Microsoft Office 2007
Microsoft Office 2008 for Mac
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats
Microsoft Office Word 2007
Microsoft Office Word Viewer
Microsoft Office Word Viewer 2003
Microsoft Office XP
Microsoft Open XML File Format Converter for Mac
Microsoft Word 2000
Microsoft Word 2002
Microsoft Word 2003

Binary Analysis: BA772 :: Available for 1 Credit
BA777 :: Available for 1 Credit

Secunia CVSS-2 Score: Available in Secunia business solutions

Subscribe: Instant alerts on relevant vulnerabilities


Advisory Content (Page 2 of 3)[ 1 ] [ 2 ] [ 3 ]

Solution:
Apply patches.

Microsoft Office Word 2000 SP3:
http://www.microsoft.com/downloads/de...=3663e9f2-a952-4238-b902-90b5b09feb38

Microsoft Office Word 2002 SP3:
http://www.microsoft.com/downloads/de...=f1323be1-15f2-491b-abae-c03ba1394398

Microsoft Office Word 2003 SP3:
http://www.microsoft.com/downloads/de...=7cbc2587-2c8c-49b4-9f40-e4cdccb61ecd

Microsoft Office Word 2007 SP1:
http://www.microsoft.com/downloads/de...=7e205108-4c28-4cab-a4d0-4ed3fd696473

Microsoft Office Word 2007 SP2:
http://www.microsoft.com/downloads/de...=7e205108-4c28-4cab-a4d0-4ed3fd696473

Microsoft Office 2004 for Mac:
http://www.microsoft.com/downloads/de...=5557bfb7-ebb4-4c42-8042-41e830c4e550

Microsoft Office 2008 for Mac:
http://www.microsoft.com/downloads/de...=58326da2-eb75-4b42-b1bc-e70319defb58

Open XML File Format Converter for Mac:
http://www.microsoft.com/downloads/de...=9d6d9eaa-8442-4184-8886-faab2803bde6

Microsoft Office Word Viewer 2003 SP3:
http://www.microsoft.com/downloads/de...=82980a40-f10c-4f02-b06c-3a12d4434a6b

Microsoft Office Word Viewer:
http://www.microsoft.com/downloads/de...=82980a40-f10c-4f02-b06c-3a12d4434a6b

Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1:
http://www.microsoft.com/downloads/de...=63bd8f14-e736-46ce-af66-d30f17461e5a

Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2:
http://www.microsoft.com/downloads/de...=63bd8f14-e736-46ce-af66-d30f17461e5a

Provided and/or discovered by:
1) ling & wushi of team509, reported via ZDI
2) Nicolas Joly, Vupen Security

Changelog:
2009-06-10: Added link to "Original Advisory" section.
2009-06-11: Added ZDI link to the "Original Advisory" section. Updated "Description" with additional vulnerability details.

Original Advisory:
MS09-027 (KB969514, KB969600, KB969602, KB969603, KB969604, KB969613, KB969614, KB969661, KB971822, KB971824):
http://www.microsoft.com/technet/security/Bulletin/MS09-027.mspx

Vupen Security:
http://www.vupen.com/english/advisories/2009/1546

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-09-035/

Change Page:
[ 1 ] [ 2 ] [ 3 ]



Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 12
New vulnerabilities: 18
Updated advisories: 16

Less // 59 views
Red Hat update for bind
Less // 57 views
Red Hat update for dstat
Less // 94 views
Fedora update for cups
Moderately // 97 views
Red Hat update for tomcat
Moderately // 106 views
Red Hat update for mod_jk

Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. ActivePerl Compress Modules Off-by-One Vulnerabilities // 85 views
2. IBM WebSphere Portal Unspecified Security Issue and Cross-Site Scripting // 72 views
3. Red Hat update for bind // 52 views
4. Red Hat update for dstat // 52 views
5. FreeBSD Dynamic Linker Privilege Escalation Vulnerability // 45 views
6. Adobe Flash Player Multiple Vulnerabilities // 42 views
7. Internet Explorer Charset Inheritance Cross-Site Scripting Vulnerability // 38 views
8. Fedora update for cups // 38 views
9. RT Session Fixation Vulnerability // 38 views
10. Sun Java JDK / JRE Multiple Vulnerabilities // 32 views