---------------------------------------------------------------------- A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched. Download and test it today: https://psi.secunia.com/ Read more about this new version: https://psi.secunia.com/?page=changelog ---------------------------------------------------------------------- TITLE: Microsoft Word Unspecified Memory Corruption Vulnerability SECUNIA ADVISORY ID: SA28901 VERIFY ADVISORY: http://secunia.com/advisories/28901/ CRITICAL: Highly critical IMPACT: System access WHERE: >From remote SOFTWARE: Microsoft Word Viewer 2003 http://secunia.com/product/5523/ Microsoft Word 2003 http://secunia.com/product/4908/ Microsoft Word 2002 http://secunia.com/product/2150/ Microsoft Word 2000 http://secunia.com/product/2149/ Microsoft Office XP http://secunia.com/product/23/ Microsoft Office 2003 Student and Teacher Edition http://secunia.com/product/2278/ Microsoft Office 2003 Standard Edition http://secunia.com/product/2275/ Microsoft Office 2003 Small Business Edition http://secunia.com/product/2277/ Microsoft Office 2003 Professional Edition http://secunia.com/product/2276/ Microsoft Office 2000 http://secunia.com/product/24/ DESCRIPTION: A vulnerability has been reported in Microsoft Word, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a calculation error when parsing Word documents and can be exploited to corrupt memory via a specially crafted Word file. Successful exploitation allows execution of arbitrary code. SOLUTION: Apply patches. Microsoft Word 2000 SP3: http://www.microsoft.com/downloads/details.aspx?FamilyId=A513069B-8244-48E9-B136-01DDD3862802 Microsoft Word 2002 SP3: http://www.microsoft.com/downloads/details.aspx?FamilyId=78C338AA-E410-4422-9E36-562F70D742E9 Microsoft Word 2003 SP2: http://www.microsoft.com/downloads/details.aspx?FamilyId=85CB1AA5-211F-4652-827B-2E79B8FFC2FC Microsoft Office Word Viewer 2003: http://www.microsoft.com/downloads/details.aspx?FamilyId=FD4DDECD-ABD6-4783-B300-32B9D4BAD22A PROVIDED AND/OR DISCOVERED BY: The vendor credits Rubén Santamarta, Reversemode.com. ORIGINAL ADVISORY: MS08-008 (KB947077): http://www.microsoft.com/technet/security/Bulletin/MS08-009.mspx ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------