MS.Office.Wps.Font.Code.Execution

Release Date Jun 11, 2009
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a buffer-overflow vulnerability in Microsoft Office. The vulnerability is caused by an error when the vulnerable software handles a malicious .wps file. It allows a remote attacker to execute arbitrary code via sending a crafted .wps file.
Affected Products Microsoft Office 2000 Service Pack 3 Microsoft Office XP Service Pack 3 Microsoft Office 2003 Service Pack 3 Microsoft Office 2007 Service Pack 1 Microsoft Works 8.5 Microsoft Works 9
Recommended Actions Apply the patch, available from the vendor's web site: http://www.microsoft.com/technet/security/Bulletin/MS09-024.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-1533
Reference/s http://www.microsoft.com/technet/security/Bulletin/MS09-024.mspx (MS-ID) http://www.securityfocus.com/bid/35184 (BugTraq)

Fortinet