MS.Word.RTF.Parsing.Buffer.Overflow

Release Date Aug 11, 2010
Severity critical
Impact System compromise
Description This indicates a possible attack against a buffer-overflow vulnerability in Microsoft Office. The vulnerability is due to the vulnerable software's handling of RTF data. An attacker may exploit this to execute arbitrary code by sending a malicious .rtf file.
Affected Products Microsoft Office XP Service Pack 3 Microsoft Office 2003 Service Pack 3 Microsoft Office System 2007 Service Pack 2
Recommended Actions Apply the following update supplied by the vendor: http://www.microsoft.com/technet/security/Bulletin/ms10-056.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-1902
Reference/s http://technet.microsoft.com/en-us/security/bulletin/ms10-056.mspx (MS-ID)

Fortinet