English

Calendar Discussions Polls

RSS feeds Subscriptions Contacts

The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service.

Internet threat level: 1

Follow us on

Home→Descriptions→SA15998

Microsoft Word Font Parsing Buffer Overflow Vulnerability

Secunia ID	SA15998
CVE-ID	CVE-2005-0564
Release Date	12 Jul 2005
Last Change	13 Jul 2005
Criticality	Highly Critical
Solution Status	Vendor Patch
Software	Microsoft Office 2000 Microsoft Office XP Microsoft Word 2000 Microsoft Word 2002 Microsoft Works Suite 2001 Microsoft Works Suite 2002 Microsoft Works Suite 2003 Microsoft Works Suite 2004
Where	From remote
Impact	System access This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user.
Description	Lord Yup has reported a vulnerability in Microsoft Word, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error within the parsing of fonts. This can be exploited to cause a stack-based buffer overflow by tricking a user into opening a specially crafted Word document. Successful exploitation allows execution of arbitrary code.
Solution	Apply patches. Microsoft Office 2000 SP3: http://www.microsoft.com/downloads/details.aspx?FamilyId=CEE0864B-B196-48F4-A4B9-2ED7FB6D17D2 Microsoft Office XP SP3: http://www.microsoft.com/downloads/details.aspx?FamilyId=A7E7D2C5-1E2A-4FFB-8FC2-B2B217015820 Microsoft Works Suite 2000: http://www.microsoft.com/downloads/details.aspx?FamilyId=CEE0864B-B196-48F4-A4B9-2ED7FB6D17D2 Microsoft Works Suite 2001: http://www.microsoft.com/downloads/details.aspx?FamilyId=CEE0864B-B196-48F4-A4B9-2ED7FB6D17D2 Microsoft Works Suite 2002: http://www.microsoft.com/downloads/details.aspx?FamilyId=A7E7D2C5-1E2A-4FFB-8FC2-B2B217015820 Microsoft Works Suite 2003: http://www.microsoft.com/downloads/details.aspx?FamilyId=A7E7D2C5-1E2A-4FFB-8FC2-B2B217015820 Microsoft Works Suite 2004: http://www.microsoft.com/downloads/details.aspx?FamilyId=A7E7D2C5-1E2A-4FFB-8FC2-B2B217015820
Reported by	Lord Yup
Original Advisory	MS05-035 (903672): http://www.microsoft.com/technet/security/Bulletin/MS05-035.mspx iDEFENSE: http://www.idefense.com/application/poi/display?id=281&type=vulnerabilities