Microsoft Word Wordart Doc Denial Of Service Vulnerability

Bugtraq ID:	26981
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 22 2007 12:00AM
Updated:	Jan 02 2008 05:00PM
Credit:	Juan Pablo Lopez Yacubian is credited with the discovery of this vulnerability.
Vulnerable:	Microsoft Word 2003 + Microsoft Office 2003 SP1 + Microsoft Office 2003 0
Not Vulnerable:

Microsoft Word Wordart Doc Denial Of Service Vulnerability

Microsoft Word is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected application to crash. The attacker may also be able to execute arbitrary code in the context of the user running the affected application, but this has not been confirmed.

This issue affects Word 2003; other versions may also be vulnerable.

Microsoft Word Wordart Doc Denial Of Service Vulnerability

The discoverer of this vulnerability has developed a proof of concept demonstrating this issue. At the time of writing, this proof of concept was not available for download.

Microsoft Word Wordart Doc Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Word Wordart Doc Denial Of Service Vulnerability

References:

• Microsoft Word Homepage (Microsoft )
  
• Word 2003 denial of service ([email protected])