Signature Detail

HTTP: Word Document Bookmark Vulnerability

This signature detects attempts to exploit a known vulnerability in Microsoft Word. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.

Extended Description

Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

• Microsoft Office 2004 for Mac
• Microsoft Word 2002 SP1
• Microsoft Word 2002 SP2
• Microsoft Word 2002 SP3
• Microsoft Word 2002

References

• BugTraq: 43769
• CVE: CVE-2010-3216