Release DateAug 11, 2010 |
Severitycritical |
ImpactSystem compromiseDenial of service |
DescriptionThis indicates a possible attack against a memory-corruption vulnerability in Microsoft Word.The vulnerability is caused by the vulnerable software's inability to properly handle malformed data in Word documents. An attacker may exploit this to execute arbitrary code. |
Affected ProductsMicrosoft Office Word 2002 Service Pack 3Microsoft Office Word 2003 Service Pack 3 Microsoft Office Word Viewer |
Recommended ActionsApply the update supplied by the vendor:http://www.microsoft.com/technet/security/Bulletin/ms10-056.mspx |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2010-1903 |
Reference/shttp://technet.microsoft.com/en-us/security/bulletin/ms10-056.mspx (MS-ID)http://www.zerodayinitiative.com/advisories/ZDI-10-151 |