• info
• discussion
• exploit
• solution
• references

Microsoft Office String Parsing Remote Code Execution Vulnerability

Solution:
Microsoft has released an advisory along with fixes to address this issue.


Microsoft Project 2000 SR1

• Microsoft Security Update for Project 2000 (KB917152)
  http://www.microsoft.com/downloads/details.aspx?familyid=5C28E38A-F323 -4006-BEED-A00840CAFBCE

Microsoft Project 2002 SP1

• Microsoft Security Update for Project 2002 (KB917150)
  http://www.microsoft.com/downloads/details.aspx?familyid=BF9CBFA6-5E91 -4AA8-82C1-4C9A92A5B954

Microsoft Office XP SP3

• Microsoft Security Update for Office XP (KB917150)
  http://www.microsoft.com/downloads/details.aspx?familyid=266C287E-A773 -4D9C-9736-EEAFB34FF893

Microsoft Office 2003 SP2

• Microsoft Security Update for Office 2003 (KB917151)
  http://www.microsoft.com/downloads/details.aspx?familyid=1B11AC6B-4A78 -4A7B-995F-94738CAFE27F

Microsoft Office 2000 SP3

• Microsoft Security Update for Office 2000 (KB917152)
  http://www.microsoft.com/downloads/details.aspx?familyid=776FF379-0B9D -45D5-8B3C-CF9A4BD25DAE

Microsoft Project 2002 SP2

• Microsoft Security Update for Project 2002 (KB917150)
  http://www.microsoft.com/downloads/details.aspx?familyid=BF9CBFA6-5E91 -4AA8-82C1-4C9A92A5B954

Microsoft Visio 2002 SP2

• Microsoft Security Update for Visio 2002 (KB917150)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F67D75A-B69D -4064-942C-F5515C920E6B