Microsoft Office v. X for Macintosh Network PID Checker Denial of Service Vulnerability
BID:4045
Info
Microsoft Office v. X for Macintosh Network PID Checker Denial of Service Vulnerability
| Bugtraq ID: | 4045 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 06 2002 12:00AM |
| Updated: | Feb 06 2002 12:00AM |
| Credit: | Discovered by Marty Schoch <[email protected]>. |
| Vulnerable: |
Microsoft Office v. X |
| Not Vulnerable: | |
Discussion
Microsoft Office v. X for Macintosh Network PID Checker Denial of Service Vulnerability
Microsoft Office v. X contains a network-aware anti-piracy mechanism that detects other copies of Office v. X using the same Product Identifier (PID) on the network. If it detects a duplicate PID on the network, Office will shut down.
It is possible to send a certain type of malformed announcement to the PID Checker service that will cause the service to fail. If the service fails, Office will also shut down, possibly resulting in a loss of any unsaved data.
Restarting Office will allow normal operation to resume.
Microsoft Office v. X contains a network-aware anti-piracy mechanism that detects other copies of Office v. X using the same Product Identifier (PID) on the network. If it detects a duplicate PID on the network, Office will shut down.
It is possible to send a certain type of malformed announcement to the PID Checker service that will cause the service to fail. If the service fails, Office will also shut down, possibly resulting in a loss of any unsaved data.
Restarting Office will allow normal operation to resume.
Exploit / POC
Microsoft Office v. X for Macintosh Network PID Checker Denial of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Microsoft Office v. X for Macintosh Network PID Checker Denial of Service Vulnerability
Solution:
Microsoft has released a patch that addresses this vulnerability:
Microsoft Office v. X
Solution:
Microsoft has released a patch that addresses this vulnerability:
Microsoft Office v. X
-
Microsoft Q317879
http://www.microsoft.com/mac/DOWNLOAD/OFFICEX/NetworkUpdater.asp
References
Microsoft Office v. X for Macintosh Network PID Checker Denial of Service Vulnerability
References:
References:
- Microsoft Security Bulletin MS02-002 (Microsoft)