HTTP: Microsoft Word Global Array Index Heap Overflow

This signature detects attempts to exploit a known buffer overflow vulnerability in Microsoft Word products. It is due to an index error when processing DOC document that contains a crafted TextFlow record. A remote attacker can exploit this by enticing the target user to open a crafted DOC file. A successful attack can lead to arbitrary code execution within the security context of the currently logged on user. The behavior of the target depends on the intention of the attacker. Any code injected is executed within the security context of the currently logged in user. In an unsuccessful code execution attack, the affected product terminates resulting in the loss of any unsaved data from the current session.

Extended Description

Microsoft Word is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions.

Affected Products

Microsoft office_2004_for_mac

References

BugTraq: 32583

CVE: CVE-2008-4026

Short Name

HTTP:STC:DL:WORD-GLOBAL-INDEX

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Word Global Array Index Heap Overflow

Extended Description

Affected Products

References

Found a potential security threat?