HTTP: Microsoft Word Section Table Array Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Microsoft Office Word. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Word 2000 is prone to a remote code-execution vulnerability. Microsoft Word 2000 is confirmed vulnerable to a remote code-execution issue. Exploit attempts against Word 2003/XP will consume all CPU resources and will cause a denial of service for legitimate users. Note that this issue is distinct from issues described in BID 21589 (Microsoft Word Code Execution Vulnerability), BID 21451 (Microsoft Word Malformed String Remote Code Execution Vulnerability), and BID 21518 (Microsoft Word Malformed Data Structures Code Execution Vulnerability).

Affected Products

Microsoft office_2000

References

BugTraq: 22225

CVE: CVE-2007-0515

Short Name

HTTP:STC:DL:WORD-SECTION-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Word Section Table Array Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?