BugTraq
The newest Word flaw is due to malformed data structure handling Dec 11 2006 09:59PM
Juha-Matti Laurio (juha-matti laurio netti fi) (2 replies)
Re: The newest Word flaw is due to malformed data structure handling Dec 12 2006 02:31PM
Dave \No, not that one\ Korn (davek_throwaway hotmail com)
Juha-Matti Laurio wrote:
> Related to the newest MS Word 0-day
> http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-ze
ro-day.aspx
>
> US-CERT Vulnerability Note VU#166700 released today lists the
> following new technical detail:
> "Microsoft Word fails to properly handle malformed data structures
> allowing memory corruption to occur."
> http://www.kb.cert.org/vuls/id/166700
> - Juha-Matti

That's kind-of a truism, since word files basically /are/ serialised data
structures. Well, assuming we're not talking about some new xml format but
native word .doc format.

cheers,
DaveK
--
Can't think of a witty .sigline today....

[ reply ]
Re: The newest Word flaw is due to malformed data structure handling Dec 12 2006 12:20AM
Alexander Sotirov (asotirov determina com)


 

Privacy Statement
Copyright 2010, SecurityFocus