Microsoft Word Malformed String Memory Corruption (MS07-060; CVE-2007-3899)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word for MAC. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Word Mac file with a malformed string. Successful exploitation of...

CVE-2007-3899

CVE-2007-3899 concerns memory corruption in Word affecting Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac. The root cause is a malformed string in a Word file that can be processed by Word, enabling user-assisted remote code execution on vulnerable hosts. The Mac variant is reported in the...