CVE-2010-1901

Related Files

iDEFENSE Security Advisory 2010-08-10.2

Posted Aug 13, 2010

Authored by iDefense Labs, wushi | Site idefense.com

iDefense Security Advisory 08.10.10 - Remote exploitation of an memory corruption vulnerability in Microsoft's Office RTF Parsing Engine could allow an attacker to execute arbitrary code with the privileges of the current user. During the processing of a RTF document containing certain control words, the RTF parsing engine may incorrectly read a value from the RTF file. This value may directly affect the control of execution flow within the RTF parsing engine.

tags | advisory, remote, arbitrary

advisories | CVE-2010-1901

SHA-256 | b5e0d708c7afc4fb28b1ce1539313fd783bff59a1505c38d75cbd5f66b9d464d

Download | Favorite | View