A vulnerability in the way Microsoft Office handles Rich Text Format files may lead to execution of arbitrary code.
Microsoft Office contains a vulnerability that could be exploited when parsing malformed strings contained in specially crafted Rich Text Format (.rtf) files. According to Microsoft Security Bulletin ms08-026:
The vulnerability could allow remote code execution if a user opens a specially crafted .rtf file with malformed strings in Word or previews a specially crafted .rtf file with malformed strings in rich text e-mail.
A remote, unauthenticated attacker may be able to execute arbitrary code with the privileges of the affected user or cause a denial-of-service condition.
Do not open untrusted Microsoft Office documents
This vulnerability was reported in Microsoft Security Bulletin ms08-026. Microsoft credits wushi of team509, working with Zero Day Initiative, for reporting this issue.
This document was written by Chris Taschner.
|Date First Published:||2008-05-13|
|Date Last Updated:||2008-05-13 19:19 UTC|