Vulnerability Note VU#409316
Microsoft Office fails to properly handle document properties
Microsoft Office contains a buffer overflow when handling specially crafted document properties. This vulnerability could allow a remote attacker to execute arbitrary code.
Microsoft Office applications fail to properly validate property fields resulting in a buffer overflow. When an Office document containing malformed a property field is opened with an Office application, system memory can be corrupted in a way that may allow an attacker to execute arbitrary code. Property fields include, but are not limited to document title, subject, and author.
More information, including a list of affected Office applications, is available in Microsoft Security Bulletin MS06-038.
A remote, unauthenticated attacker may be able to execute arbitrary code.
Apply a patch from Microsoft
Do not access Office documents from untrusted sources
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Microsoft Corporation||Affected||-||11 Jul 2006|
CVSS Metrics (Learn More)
This vulnerability was reported in Microsoft Security Bulletin MS06-038.
This document was written by Jeff Gennari.
- CVE IDs: CVE-2006-2389
- Date Public: 11 Jul 2006
- Date First Published: 11 Jul 2006
- Date Last Updated: 11 Jul 2006
- Severity Metric: 22.44
- Document Revision: 34
If you have feedback, comments, or additional information about this vulnerability, please send us email.