Signature Detail

HTTP: Microsoft Office Word STSH Record Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Office. A successful attack can lead to arbitrary remote code execution.

Extended Description

Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

• Microsoft word_2002 SP1
• Microsoft word_2002 SP2
• Microsoft word_2002 SP3
• Microsoft word_2002
• Microsoft word_2003 SP1
• Microsoft word_2003 SP2
• Microsoft word_2003 SP3
• Microsoft word_2003
• Microsoft word_2007 SP1
• Microsoft word_2007 SP2
• Microsoft word_2007
• Microsoft word_2010

References

• BugTraq: 48261