Multiple vulnerabilities have been reported in Microsoft Word 2002, which can be exploited by malicious people to compromise a user's system.

1) An error when parsing a specially crafted Word file may result in an uninitialised pointer being used.

2) An improper boundary check when parsing a specially crafted Word file can be exploited to corrupt memory.

3) An error in the handling of certain index values in a specially crafted Word file can be exploited to corrupt memory.

4) An error in the handling of certain return values when parsing a specially crafted Word file can be exploited to corrupt memory.

5) An error in the handling of bookmarks when parsing a specially crafted Word file can be exploited to corrupt memory.

6) A double-free error when processing LFO (List Format Override) records can be exploited to corrupt memory via a specially crafted Word document.

7) An error in the handling of certain records when parsing a specially crafted Word file can be exploited to cause a heap-based buffer overflow.

8) An error in the handling of certain indexes when parsing BKF objects in a specially crafted Word file can be exploited to corrupt memory.

9) An error in the parsing of LVL structures in a specially crafted Word file can be exploited to corrupt memory.

10) An error in the handling of certain malformed records when parsing a specially crafted Word file can be exploited to corrupt memory.

11) A boundary error when parsing a specially crafted Word file can be exploited to cause a stack-based buffer overflow.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
6) Alin Rad Pop, Secunia Research.
1-10) Chaouki Bekrar, Vupen.
11) Nicolas Joly, Vupen.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS10-079 (KB2293194, KB2328360):
http://www.microsoft.com/technet/security/bulletin/ms10-079.mspx

Secunia Research:
http://secunia.com/secunia_research/2010-76/

Vupen:
http://archives.neohapsis.com/archives/bugtraq/2010-10/0115.html
http://archives.neohapsis.com/archives/bugtraq/2010-10/0117.html

Technical Analysis
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers