Microsoft Word (CVE-2010-3214) Remote Code Execution Vulnerability

Bugtraq ID:	43760
Class:	Boundary Condition Error
CVE:	CVE-2010-3214
Remote:	Yes
Local:	No
Published:	Oct 12 2010 12:00AM
Updated:	Oct 14 2010 05:29PM
Credit:	Nicolas Joly of VUPEN Vulnerability Research Team.
Vulnerable:	Microsoft Word Web App 0 Microsoft Word Viewer 0 Microsoft Word 2010 0 Microsoft Word 2007 SP2 Microsoft Word 2003 SP3 Microsoft Word 2002 SP3 Microsoft Open XML File Format Converter for Mac 0 Microsoft Office Compatibility Pack 2007 SP2 Microsoft Office 2008 for Mac 0 Microsoft Office 2004 for Mac 0
Not Vulnerable:

Microsoft Word (CVE-2010-3214) Remote Code Execution Vulnerability

Microsoft Word is prone to a remote code-execution vulnerability.

Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file.

Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Microsoft Word (CVE-2010-3214) Remote Code Execution Vulnerability

A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

Microsoft Word (CVE-2010-3214) Remote Code Execution Vulnerability

Solution:
Vendor updates are available. Please see the references for details.


Microsoft Open XML File Format Converter for Mac 0

• Microsoft OpenXMLConverter117.dmg
  http://www.microsoft.com/downloads/details.aspx?FamilyID=5c759c46-ead3 -44ea-b7c8-a308b3140d2e

Microsoft Word 2003 SP3

• Microsoft office2003-KB2344911-FullFile-ENU.exe
  http://www.microsoft.com/downloads/details.aspx?familyid=172f3743-cdfa -42d7-aeb4-27ba0e4139f7

Microsoft Office 2008 for Mac 0

• Microsoft Office2008-1227UpdateEN.dmg
  http://www.microsoft.com/downloads/details.aspx?FamilyID=abd05074-8ffc -41a4-a2f3-1d8047574552

Microsoft Word 2007 SP2

• Microsoft Word2007-kb2344993-fullfile-x86-glb.exe
  http://www.microsoft.com/downloads/details.aspx?familyid=ccad4871-32f2 -4982-a23e-9b5824397615

Microsoft Word 2010 0

• Microsoft Word2010-kb2345000-fullfile-x64-glb.exe
  http://www.microsoft.com/downloads/details.aspx?familyid=f31a1f9b-02df -4a85-a7d1-7d1e31baa30f


• Microsoft Word2010-kb2345000-fullfile-x86-glb.exe
  http://www.microsoft.com/downloads/details.aspx?familyid=6c3b8690-e568 -42ed-a858-0cbdd5ea3669

Microsoft Office 2004 for Mac 0

• Microsoft Office2004-1161UpdateEN.dmg
  http://www.microsoft.com/downloads/details.aspx?FamilyID=464965fa-971a -49dd-bcee-c4d91fac86a9

Microsoft Office Compatibility Pack 2007 SP2

• Microsoft office2007-kb2345043-v2-fullfile-x86-glb.exe
  http://www.microsoft.com/downloads/details.aspx?familyid=553d28ae-c352 -4985-97c3-e5038414be45

Microsoft Word Web App 0

• Microsoft wordwebapp2010-kb2345015-fullfile-x64-glb.exe
  http://www.microsoft.com/downloads/en/details.aspx?familyid=13b24264-e c3d-44e8-81e3-82ac767defd3

Microsoft Word 2002 SP3

• Microsoft officexp-KB2328360-FullFile-ENU.exe
  http://www.microsoft.com/downloads/details.aspx?familyid=f22d10fd-cb12 -43e8-88d5-2116cf4317c4

Microsoft Word Viewer 0

• Microsoft office-KB2345009-FullFile-ENU.exe
  http://www.microsoft.com/downloads/details.aspx?familyid=1cb5ab02-074d -4877-b378-7058959705ae

Microsoft Word (CVE-2010-3214) Remote Code Execution Vulnerability

References:

• Microsoft Word Homepage (Microsoft )
  
• VUPEN Security Research - Microsoft Office Word Document Stack Overflow Vulnerab ([email protected])
  
• Microsoft Security Bulletin MS10-079 (Microsoft)