iDefense Security Advisory 05.08.07: Microsoft Word RTF File Parsing Heap Corruption Vulnerability

Microsoft Word RTF File Parsing Heap Corruption Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND Microsoft Word is a word processing application from Microsoft Office. Rich Text Format RTF is a document file format...

CVE-2007-1202

Word or Word Viewer in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrar...

CVE-2007-1202

CVE-2007-1202 is the Word RTF Parsing Vulnerability. It affects Word/Word Viewer and related Office products (Office 2000 SP3, Word 2000; Office XP SP3/Word 2002; Office 2003 SP2/Word 2003; Word Viewer 2003; Office 2004 for Mac; Works Suites 2004–2006) where Word mishandles rich text property str...

Microsoft Security Bulletin MS07-024 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (934232)

Microsoft Security Bulletin MS07-024 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution 934232 Published: May 8, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Word Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...