OSVDB ID: 25635

Title: Microsoft Word Unspecified Code Execution

Info

Disclosure

May 19, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Jul 12, 2006

Description

Microsoft Word contains a flaw that may allow a malicious user to execute arbitrary code under the security context of the current user. The issue is triggered due to an unspecified error when processing object pointers. It is possible that the flaw may allow arbitrary code execution resulting in a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Solution Unknown
Exploit: Exploit Commercial
Disclosure: OSVDB Verified, Vendor Verified, Uncoordinated Disclosure, Discovered in the Wild

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Microsoft Corporation

Microsoft Word

2002
2003

References

Credit

  • Shih-hao Weng -   -
  • Andreas Marx - AV-Test.org


Direct URL: http://osvdb.org/25635