HTTP: Microsoft Word Documents Memory Corruption

This signature detects attempts to exploit a known vulnerability agains Microsoft Word file format document parser. A successful attack can lead to arbitrary remote code execution within the context of the user.

Extended Description

Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Word file. If the attack is successful, the attacker may be able to execute arbitrary code in the context of the currently logged-in user. Note that this issue is distinct from issues described in BID 21451 (Microsoft Word Malformed String Arbitrary Remote Code Execution Vulnerability) and BID 21518 (Microsoft Word Malformed Data Structures Code Execution Vulnerability).

Affected Products

Microsoft office_xp

References

BugTraq: 19414 21589

CVE: CVE-2006-6561

Short Name

HTTP:STC:DL:WORD-MEM-CORR

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Word Documents Memory Corruption

Extended Description

Affected Products

References

Found a potential security threat?