HTTP: Microsoft Word Font Parsing Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Microsoft Word. An attacker can create a malicious Web site with Web pages containing dangerous Word files, which if accessed by a victim, allows the attacker gain control of the victim's computer.

Extended Description

Microsoft Word is affected by a remote buffer overflow vulnerability. This vulnerability presents itself when a .doc file contains specific malformed input. Upon attempting to read the malformed .doc file, the affected application fails to properly validate data within the file. This may result in the attacker being able to control the flow of program execution. Attackers may exploit this vulnerability to execute arbitrary code in the context of the victim user attempting to access the malformed Word file.

Affected Products

Microsoft office_xp

References

BugTraq: 14216

CVE: CVE-2005-1191

Short Name

HTTP:STC:DL:WORD-FONT

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Microsoft Word Font Parsing Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?