HTTP: Microsoft Office Word mso.dll LsCreateLine Memory Corruption

This signature detects attempts to exploit a known vulnerability against Microsoft Office Word. A successful attack can lead to memory corruption and arbitrary code execution.

Extended Description

Microsoft Office is reported prone to a potential code-execution vulnerability. This vulnerability occurs when the application handles a specially crafted document. A successful attack may result in a remote compromise in the context of an affected user. Attack attempts may result in a denial-of-service condition as well. Reports indicate that this issue can be triggered with a malicious Microsoft Word document; however, other Microsoft Office applications that employ the affected function are vulnerable as well.

Affected Products

Microsoft office_2003

References

BugTraq: 18905

CVE: CVE-2006-3493

Short Name

HTTP:STC:DL:MSOFFICE-MSODLL-MC

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Microsoft Office Word mso.dll LsCreateLine Memory Corruption

Extended Description

Affected Products

References

Found a potential security threat?