HTTP: Microsoft Word Malformed Index Code Execution

This signature detects attempts to exploit a known code execution vulnerability in Microsoft Office Word. It is due to an error while parsing malformed indexes in a MS Word file. An attacker can exploit this to execute arbitrary code in the context of the current user by enticing them to open a specially crafted Word document.

Extended Description

Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

Microsoft office_2004_for_mac

References

BugTraq: 43766

CVE: CVE-2010-2750

Short Name

HTTP:STC:DL:WORD-IND

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Word Malformed Index Code Execution

Extended Description

Affected Products

References

Found a potential security threat?