Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: The newest Word flaw is due to malformed data structure handling
From: "Dave \"No, not that one\" Korn" <davek_throwaway () hotmail com>
Date: Tue, 12 Dec 2006 14:31:20 -0000

Juha-Matti Laurio wrote:
Related to the newest MS Word 0-day
http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx

US-CERT Vulnerability Note VU#166700 released today lists the
following new technical detail:
"Microsoft Word fails to properly handle malformed data structures
allowing memory corruption to occur."
http://www.kb.cert.org/vuls/id/166700
- Juha-Matti


  That's kind-of a truism, since word files basically /are/ serialised data 
structures.  Well, assuming we're not talking about some new xml format but 
native word .doc format.


    cheers,
      DaveK
-- 
Can't think of a witty .sigline today.... 




  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]