HTTP: Microsoft Word Record Parsing Length Field Overflow

This signature detects attempts to exploit a known vulnerability against Microsoft Office Word documents. Attackers can execute arbitrary code within the context of the user.

Extended Description

Microsoft Word is prone to a stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions.

Affected Products

Microsoft word_2003

References

BugTraq: 35188

CVE: CVE-2009-0563

URL: http://www.zerodayinitiative.com/advisories/ZDI-09-035

Short Name

HTTP:STC:DL:WORD-REC-LEN-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Word Record Parsing Length Field Overflow

Extended Description

Affected Products

References

Found a potential security threat?