Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word...

Vulnerability Description

Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X for Mac, and Works 2004, 2005, and 2006 allows remote attackers to execute arbitrary code via a Word document with a malformed string that triggers memory corruption, a different vulnerability than CVE-2006-6456.

References

• http://www.osvdb.org/30824
• http://www.securityfocus.com/archive/1/453735/100/0/threaded
• http://www.securityfocus.com/archive/1/453906/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30738
• http://www.microsoft.com/technet/security/advisory/929433.mspx
• http://secunia.com/advisories/23232
• http://www.us-cert.gov/cas/techalerts/TA07-044A.html
• http://blogs.technet.com/msrc/archive/2006/12/06/microsoft-security-advisory-929433-posted.aspx
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A238
• http://blogs.securiteam.com/?p=759
• http://www.vupen.com/english/advisories/2006/4866
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014
• http://www.kb.cert.org/vuls/id/167928
• http://securitytracker.com/id?1017339
• http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9005698&intsrc=hm_list
• http://www.securityfocus.com/bid/21451
• http://www.securityfocus.com/archive/1/454061/100/0/threaded