HTTP: Microsoft Office Word sprmTDiagLine80 Record Parsing Stack Buffer Overflow

This signature detects attempts to exploit a known stack buffer overflow vulnerability in Microsoft Office Word. It is due to a boundary error while parsing a crafted Word document. An attack can exploited this by enticing a user to open a maliciously crafted file. In a successful attack, the injected code runs within the security context of the currently logged in user. In an unsuccessful attack, the vulnerable application can terminate abnormally.

Extended Description

Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

Microsoft word_web_app

References

BugTraq: 43760

CVE: CVE-2010-3214

Short Name

HTTP:STC:DL:WORD-SPRMTDIAGLINE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Office Word sprmTDiagLine80 Record Parsing Stack Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?