• info
• discussion
• exploit
• solution
• references

Microsoft Word Workspace Memory Corruption Remote Code Execution Vulnerability

Solution:
The vendor released an advisory and updates to address this issue. Please see the references for more information.

NOTE (October 17, 2007): Microsoft has released further information regarding the update. After the update is applied, Word will still exit unexpectedly when the user opens a malformed document, but the vulnerability is no longer present so exploitation does not occur in such a case. The vendor has also provided information regarding stability issues stemming from the update. Please see MS07-060 for details.


Microsoft Word 2004 for Mac 0

• Microsoft Microsoft Office 2004 for Mac 11.3.8 Update
  http://download.microsoft.com/download/8/1/1http://www.microsoft.com/m ac/downloads.aspx?pid=download&location=/mac/download/Office2004/Offic e2004_1138.xml&secid=4&ssid=38&flgnosysreq=True/811D792C-E8F2-44EB-A25 C-167FB828405B/Office2004-1138UpdateEN.dmg

Microsoft Word 2000 SP3

• Microsoft Security Update for Word 2000 (KB942669)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=8B3072FB-5933 -47F7-A498-13A93E268E57&displaylang=en

Microsoft Word 2002 SP3

• Microsoft Security Update for Word 2002 (KB942670)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=D6B787BB-03FF -4F67-8B69-6011FB18BA75