----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?


Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-
Sicherheit:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
Microsoft Office Insecure Shared Section Permissions

SECUNIA ADVISORY ID:
SA16256

VERIFY ADVISORY:
http://secunia.com/advisories/16256/

CRITICAL:
Not critical

IMPACT:
DoS

WHERE:
Local system

SOFTWARE:
Microsoft Access 2000
http://secunia.com/product/36/
Microsoft Excel 2000
http://secunia.com/product/3054/
Microsoft Office 2000
http://secunia.com/product/24/
Microsoft Outlook 2000
http://secunia.com/product/33/
Microsoft PowerPoint 2000
http://secunia.com/product/3052/
Microsoft Word 2000
http://secunia.com/product/2149/

DESCRIPTION:
Sylvain Roger has discovered a weakness in various Microsoft Office
applications, which can be exploited by malicious, local users to
cause a DoS (Denial of Service).

The weakness is caused due to insecure default permissions on some
shared sections with the names
"\BaseNamedObjects\Mso97SharedDg??????????". This makes it possible
for an unprivileged user to crash or freeze other users' running
Microsoft Office applications.

The weakness has been confirmed in various applications included in a
fully updated Microsoft Office 2000. Other versions may also be
affected.

SOLUTION:
Grant only trusted users access to affected systems.

PROVIDED AND/OR DISCOVERED BY:
Sylvain Roger, Solucom.

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------