HTTP: Microsoft Word Array Data Handling Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Micosoft Office Word. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Word file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

Affected Products

Microsoft office_xp

References

BugTraq: 23804

CVE: CVE-2007-0035

Short Name

HTTP:STC:DL:WORD-ARRAY-DATA

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Word Array Data Handling Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?