MS.Office.Word.Document.Handling.Code.Execution

Release Date Aug 08, 2008
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attempt to exploit a code-execution vulnerability in Microsoft Office Word. The vulnerability is caused by an error when the vulnerable software handles a crafted .doc file. It allows a remote attacker to execute arbitrary code.
Affected Products Microsoft Office XP Microsoft Word 2002
Recommended Actions Use Microsoft Office Word 2003 Viewer or Microsoft Office Word 2003 Viewer SP3 in opening and viewing Microsoft Word files.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2008-2244
Reference/s http://www.securityfocus.com/bid/30124 (BugTraq) http://secunia.com/advisories/30975 http://www.frsirt.com/english/advisories/2008/2028 (FrSIRT) http://www.microsoft.com/technet/security/advisory/953635.mspx http://www.microsoft.com/technet/security/Bulletin/MS08-042.mspx (MS-ID)

Fortinet