HTTP: Microsoft Office Word HTML Linked Objects Memory Corruption

This signature detects attempts to exploit a known memory corruption vulnerability in Microsoft Office Word. If is due to the application incorrectly handling a malformed plcffldMom record. This can be exploited by remote attackers to execute arbitrary code on the target system by enticing a user to open a maliciously crafted file. In a successful attack the injected code runs within the security context of the currently logged in user. In an unsuccessful attack, the vulnerable application can terminate abnormally.

Extended Description

Microsoft Word is prone to a remote memory-corruption vulnerability because it fails to properly allocate heap-based memory. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions.

Affected Products

Microsoft word_2002

References

BugTraq: 42130

CVE: CVE-2010-1903

Short Name

HTTP:STC:DL:WORD-LINK-OBJ

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Office Word HTML Linked Objects Memory Corruption

Extended Description

Affected Products

References

Found a potential security threat?