Signature Detail

HTTP: Microsoft Office Word and WordPerfect Converter Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft Office Word and WordPerfect Converter. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client.

Extended Description

Microsoft Word 2000 is prone to a remote code-execution vulnerability because it fails to properly validate an unspecified string when parsing a WordPerfect document. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may result in denial-of-service conditions.

Affected Products

• Avaya Messaging Application Server MM 1.1
• Avaya Messaging Application Server MM 2.0
• Avaya Messaging Application Server MM 3.0
• Avaya Messaging Application Server MM 3.1
• Avaya Messaging Application Server
• Microsoft Office Converter Pack
• Microsoft Word 2000 SP2
• Microsoft Word 2000 SP3
• Microsoft Word 2000 SR1
• Microsoft Word 2000 Sr1a
• Microsoft Word 2000

References

• BugTraq: 34469
• CVE: CVE-2009-0088