Microsoft Office Word Short Sign Memory Corruption

[begood]

I. BACKGROUND --------------------- Microsoft Office Word, included in the Microsoft Office suite, is a powerful authoring program that gives the ability to create and share documents by combining a comprehensive set of writing tools with the easy-to-use Microsoft Office Fluent user interface. II. DESCRIPTION --------------------- VUPEN Vulnerability Research Team discovered a critical vulnerability in Microsoft Office Word. The vulnerability is caused by a memory corruption when parsing certain data in a Word document, which could be exploited by remote attackers to execute arbitrary code by tricking a user into opening a specially crafted Word file. III. AFFECTED PRODUCTS --------------------------- Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pack 3 Microsoft Office XP Service Pack 3 Microsoft Word Viewer

http://packetstormsecurity.org/1010-advisories/vupen-msossmc.txt