Microsoft Word Multiple Remote Denial Of Service Vulnerabilities

Bugtraq ID:	11350
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 07 2004 12:00AM
Updated:	Oct 07 2004 12:00AM
Credit:	Disclosure of this issue is credited to HexView.
Vulnerable:	Microsoft Word 2002 SP3
Not Vulnerable:

Microsoft Word Multiple Remote Denial Of Service Vulnerabilities

Reportedly Microsoft Word is affected by multiple remote denial of service vulnerabilities. These issues are due to input validation errors surrounding malformed '.doc' formatted files.

An attacker may leverage these issues to cause the affected software to hang or crash, denying service to legitimate users.

Microsoft Word Multiple Remote Denial Of Service Vulnerabilities

No exploit is required to leverage this issue.

Microsoft Word Multiple Remote Denial Of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Word Multiple Remote Denial Of Service Vulnerabilities

References:

• Microsoft PowerPoint Home Page (Microsoft)
  
• [HV-HIGH] MS Word multiple exceptions, at least one exploitable ([email protected])