Vulnerability CVE-2009-3135
Published: 2009-11-11   Modified: 2012-02-13

Description:
Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File Information Block (FIB) structure, aka "Microsoft Office Word File Information Memory Corruption Vulnerability."

Type:

CWE-119

 (Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
9.3/10
10/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Microsoft -> Office 
Microsoft -> Office word 
Microsoft -> Office word viewer 
Microsoft -> Open xml file format converter 

 References:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=831
http://www.securityfocus.com/bid/36950
http://www.securitytracker.com/id?1023158
http://www.us-cert.gov/cas/techalerts/TA09-314A.html
http://www.vupen.com/english/advisories/2009/3194
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-068
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6555
Copyright 2024, cxsecurity.com

 

Back to Top