MS.Office.Drawing.Shapes.Memory.Corruption

Release Date Aug 13, 2009
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a code execution vulnerability in Microsoft Office. The vulnerability is caused by an error when the vulnerable software handles a specially crafted Office file. It allows a remote attacker to execute arbitrary code.
Affected Products Microsoft Office 2000 Service Pack 3 Microsoft Office XP Service Pack 3 Microsoft Office 2003 Service Pack 2 Microsoft Office Excel Viewer 2003 Microsoft Office Excel Viewer 2003 Service Pack 3 Microsoft Office 2004 for Mac
Recommended Actions Apply patch, available from the web site: http://www.microsoft.com/technet/security/bulletin/MS08-016.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2008-0118
Reference/s http://www.frsirt.com/english/advisories/2008/0848 (FrSIRT) http://www.microsoft.com/technet/security/Bulletin/MS08-016.mspx (MS-ID) http://www.milw0rm.com/exploits/5320

Fortinet