Microsoft Word Uninitialized Pointer (CVE-2010-2747) Remote Code Execution Vulnerability

Bugtraq ID:	43754
Class:	Unknown
CVE:	CVE-2010-2747
Remote:	Yes
Local:	No
Published:	Oct 12 2010 12:00AM
Updated:	Oct 14 2010 06:39PM
Credit:	Chaouki Bekrar of VUPEN Vulnerability Research Team.
Vulnerable:	Microsoft Word 2002 SP3 Microsoft Office 2004 for Mac 0
Not Vulnerable:

Microsoft Word Uninitialized Pointer (CVE-2010-2747) Remote Code Execution Vulnerability

Microsoft Word is prone to a remote code-execution vulnerability.

Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file.

Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Microsoft Word Uninitialized Pointer (CVE-2010-2747) Remote Code Execution Vulnerability

A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

Microsoft Word Uninitialized Pointer (CVE-2010-2747) Remote Code Execution Vulnerability

Solution:
Vendor updates are available. Please see the references for details.


Microsoft Word 2002 SP3

• Microsoft officexp-KB2328360-FullFile-ENU.exe
  http://www.microsoft.com/downloads/details.aspx?familyid=f22d10fd-cb12 -43e8-88d5-2116cf4317c4

Microsoft Office 2004 for Mac 0

• Microsoft Office2004-1161UpdateEN.dmg
  http://www.microsoft.com/downloads/details.aspx?FamilyID=464965fa-971a -49dd-bcee-c4d91fac86a9

Microsoft Word Uninitialized Pointer (CVE-2010-2747) Remote Code Execution Vulnerability

References:

• Microsoft Word Homepage (Microsoft )
  
• VUPEN Security Research - Microsoft Office Word Uninitialized Pointer Vulnerabil (VUPEN Security Research )
  
• Microsoft Security Bulletin MS10-079 (Microsoft)