----------------------------------------------------------------------



Secunia integrated with Microsoft WSUS 
http://secunia.com/blog/71/



----------------------------------------------------------------------

TITLE:
Microsoft Office File Parsing Buffer Overflow Vulnerability

SECUNIA ADVISORY ID:
SA38481

VERIFY ADVISORY:
http://secunia.com/advisories/38481/

DESCRIPTION:
Core Security Technologies has reported a vulnerability in Microsoft
Office, which can be exploited by malicious people to compromise a
user's system.

The vulnerability is caused due to an error when parsing
OfficeArtSpgr containers and can be exploited to cause a buffer
overflow via a specially crafted Office file.

Successful exploitation allows execution of arbitrary code.

SOLUTION:
Apply patches.

Microsoft Office XP SP3:
http://www.microsoft.com/downloads/details.aspx?familyid=47553f45-fa10-40e5-8267-9d42ff560a62

Microsoft Office 2004 for Mac:
http://www.microsoft.com/downloads/details.aspx?FamilyID=7c985595-00c5-44b8-81c3-59d9967220f8

PROVIDED AND/OR DISCOVERED BY:
Damian Frizza, Core Security Technologies.

ORIGINAL ADVISORY:
MS10-003 (KB978214, KB977896, KB979674):
http://www.microsoft.com/technet/security/Bulletin/MS10-003.mspx

Core Security Technologies:
http://www.coresecurity.com/content/excel-buffer-overflow

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------