VUPEN Security Research Advisory - VUPEN-SR-2008-06
Advisory URL: http://www.vupen.com/english/advisories/2009/1546
June 9, 2009
Microsoft Office Word, included in the Microsoft Office system,
is a powerful authoring program that gives you the ability to
create and share documents by combining a comprehensive set of
writing tools with the easy-to-use Microsoft Office Fluent user
interface.
VUPEN Security discovered a critical vulnerability affecting Microsoft
Office Word.
This vulnerability is caused by a buffer overflow error within the
parsing of certain data within a Word file, which could allow attackers
to execute arbitrary code by tricking a user into opening a specially
crafted document.
According to the vendor, the following products are affected:
Fully functional remote code execution exploit codes have been developed
by VUPEN Security and are available with the in-depth binary analysis of
the vulnerability through the VUPEN Exploits & PoCs Service.
Apply patch MS09-027 :
http://www.microsoft.com/technet/security/bulletin/ms09-027.mspx
Thse vulnerability was discovered by Nicolas JOLY of VUPEN Security
http://www.vupen.com/english/advisories/2009/1546
http://www.microsoft.com/technet/security/bulletin/ms09-027.mspx
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0565
28/11/2008 - Vendor notified
28/11/2008 - Vendor response
20/01/2009 - Status update received
09/06/2009 - Coordinated public Disclosure