Signature Detail

HTTP: Microsoft Office Word sprmTDiagLine80 Record Parsing Stack Buffer Overflow

This signature detects attempts to exploit a known stack buffer overflow vulnerability in Microsoft Office Word. It is due to a boundary error while parsing a crafted Word document. An attack can exploited this by enticing a user to open a maliciously crafted file. In a successful attack, the injected code runs within the security context of the currently logged in user. In an unsuccessful attack, the vulnerable application can terminate abnormally.

Extended Description

Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

• Microsoft office_2004_for_mac
• Microsoft office_2008_for_mac
• Microsoft office_compatibility_pack_2007 SP2
• Microsoft office_web_apps
• Microsoft open_xml_file_format_converter_for_mac
• Microsoft word_2002 SP3
• Microsoft word_2003 SP3
• Microsoft word_2007 SP2
• Microsoft word_2010
• Microsoft word_viewer
• Microsoft word_web_app

References

• BugTraq: 43760
• CVE: CVE-2010-3214