• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Word RTF Malformed Control Word Variant 2 Remote Code Execution Vulnerability

Solution:
The vendor released an advisory and updates to address this issue. Please see the references for more information.


Microsoft Office Word 2003 Viewer SP3

• Microsoft Security Update for Microsoft Office Word Viewer 2003 (KB956366)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70de7c3c-519f -4f4a-a03f-027f80b5415c

Microsoft Office Compatibility Pack 2007 SP1

• Microsoft Security Update for 2007 Microsoft Office System (KB956828)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=55430121-4476 -48b8-9f6f-4a60fa0b2970

Microsoft Word 2003 SP3

• Microsoft Security Update for Microsoft Office Word 2003 (KB956357)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=45c81c60-4b1b -4246-839b-198ebc4eeae2

Microsoft Outlook 2007 SP1 0

• Microsoft Security Update for Microsoft Office Word 2007 (KB956358)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=5b51cb5e-3899 -4257-82cf-7e92fa619c37

Microsoft Office Compatibility Pack 2007 0

• Microsoft Security Update for 2007 Microsoft Office System (KB956828)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=55430121-4476 -48b8-9f6f-4a60fa0b2970

Microsoft Word 2000 SP3

• Microsoft Security Update for Microsoft Word 2000 (KB956328)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=43e8c4d8-307b -48f6-ac99-a9617421d40a

Microsoft Word 2002 SP3

• Microsoft Security Update for Microsoft Word 2002 (KB956329)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3ef41412-50b3 -4077-b0e3-9a3704d2f876

Microsoft Word 2007 SP1

• Microsoft Security Update for Microsoft Office Word 2007 (KB956358)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=5b51cb5e-3899 -4257-82cf-7e92fa619c37

Microsoft Outlook 2007 0

• Microsoft Security Update for Microsoft Office Word 2007 (KB956358)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=5b51cb5e-3899 -4257-82cf-7e92fa619c37