Signature Detail

HTTP: Microsoft Word Malformed Index Code Execution

This signature detects attempts to exploit a known code execution vulnerability in Microsoft Office Word. It is due to an error while parsing malformed indexes in a MS Word file. An attacker can exploit this to execute arbitrary code in the context of the current user by enticing them to open a specially crafted Word document.

Extended Description

Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

• Microsoft Office 2004 for Mac
• Microsoft Word 2002 SP3

References

• BugTraq: 43766
• CVE: CVE-2010-2750