<em style='font-weight:bold;'>(Description Provided by <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-1434" target="_blank">CVE</a>)</em> : Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a &quot;memory handling error&quot; that triggers memory corruption.

Microsoft has released a patch to address this vulnerability. Additionally, it is possible to temporarily work around the flaw by implementing the following workaround: Users of Office 2003 and Office 2007 that have installed all security patches as of May 2007 can use the Microsoft Office File Block policy to prevent opening files of this type. To deploy this workaround, save and import the following registry file for the corresponding version of Office.

Office 2003:
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Word\Security\FileOpenBlock]
"HTMLFiles"=dword:00000001

Office 2007:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpenBlock]

"HTMLFiles"=dword:00000001

Unknown or Incomplete

• Security Tracker: 1020014
• CVE ID: 2008-1434 (see also: NVD)
• Bugtraq ID: 29105
• Secunia Advisory ID: 30143
• SCIP VulDB ID: 3700
• Related OSVDB ID: 45031
• Microsoft Knowledge Base Article: 951207
• VUPEN Advisory: ADV-2008-1504
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-05/0164.html
  http://archives.neohapsis.com/archives/bugtraq/2008-05/0222.html
• Other Advisory URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=700
• Microsoft Security Bulletin: MS08-026
• CERT: TA08-134A

• Jun Mao - iDefense Labs