HTTP: Microsoft Word dppolycount RTF Control Word Handling Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Word. A successful exploit can lead to remote code execution.

Extended Description

Microsoft Word is prone to an integer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker could exploit this issue by enticing a victim to open a malicious RTF file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

Affected Products

Microsoft outlook_2007

References

BugTraq: 32579

CVE: CVE-2008-4025

Short Name

HTTP:STC:DL:WORD-DPPOLYCOUNT

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Word dppolycount RTF Control Word Handling Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?