---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secunia_vacancies/ ---------------------------------------------------------------------- TITLE: Microsoft Word Font Parsing Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA15998 VERIFY ADVISORY: http://secunia.com/advisories/15998/ CRITICAL: Highly critical IMPACT: System access WHERE: >From remote SOFTWARE: Microsoft Works Suite 2004 http://secunia.com/product/3897/ Microsoft Works Suite 2003 http://secunia.com/product/2143/ Microsoft Works Suite 2002 http://secunia.com/product/2144/ Microsoft Works Suite 2001 http://secunia.com/product/2145/ Microsoft Office 2000 http://secunia.com/product/24/ Microsoft Office XP http://secunia.com/product/23/ Microsoft Word 2000 http://secunia.com/product/2149/ Microsoft Word 2002 http://secunia.com/product/2150/ DESCRIPTION: Lord Yup has reported a vulnerability in Microsoft Word, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error within the parsing of fonts. This can be exploited to cause a stack-based buffer overflow by tricking a user into opening a specially crafted Word document. Successful exploitation allows execution of arbitrary code. SOLUTION: Apply patches. Microsoft Office 2000 SP3: http://www.microsoft.com/downloads/details.aspx?FamilyId=CEE0864B-B196-48F4-A4B9-2ED7FB6D17D2 Microsoft Office XP SP3: http://www.microsoft.com/downloads/details.aspx?FamilyId=A7E7D2C5-1E2A-4FFB-8FC2-B2B217015820 Microsoft Works Suite 2000: http://www.microsoft.com/downloads/details.aspx?FamilyId=CEE0864B-B196-48F4-A4B9-2ED7FB6D17D2 Microsoft Works Suite 2001: http://www.microsoft.com/downloads/details.aspx?FamilyId=CEE0864B-B196-48F4-A4B9-2ED7FB6D17D2 Microsoft Works Suite 2002: http://www.microsoft.com/downloads/details.aspx?FamilyId=A7E7D2C5-1E2A-4FFB-8FC2-B2B217015820 Microsoft Works Suite 2003: http://www.microsoft.com/downloads/details.aspx?FamilyId=A7E7D2C5-1E2A-4FFB-8FC2-B2B217015820 Microsoft Works Suite 2004: http://www.microsoft.com/downloads/details.aspx?FamilyId=A7E7D2C5-1E2A-4FFB-8FC2-B2B217015820 PROVIDED AND/OR DISCOVERED BY: Lord Yup ORIGINAL ADVISORY: MS05-035 (903672): http://www.microsoft.com/technet/security/Bulletin/MS05-035.mspx iDEFENSE: http://www.idefense.com/application/poi/display?id=281&type=vulnerabilities ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------