Secunia Research: Microsoft Word LFO Parsing Double-Free Vulnerability

====================================================================== Secunia Research 23/12/2010 - Microsoft Word LFO Parsing Double-Free Vulnerability - ====================================================================== Table of Contents Affected...

VUPEN Security Research - Microsoft Office Word Document Invalid Pointer Vulnerability (CVE-2010-3217)

VUPEN Security Research - Microsoft Office Word Document Invalid Pointer Vulnerability CVE-2010-3217 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Word, included in the Microsoft Office suite, is a powerful authoring program that gives the ability ...

CVE-2010-3217

CVE-2010-3217 is a Microsoft Word 2002 SP3 vulnerability described as a double-free in Word’s LFO (List Format Override) processing that can lead to remote code execution when a crafted Word document is opened. The issue arises from handling certain Word document structures, enabling an attacker ...