Microsoft Office contains a buffer overflow in the parsing of routing slips, which may allow an attacker to execute arbitrary code on a vulnerable system.
According to Microsoft Security Bulletin MS06-012:
By convincing a user to open a specially crafted Microsoft Office document, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system.
Install an update
Thanks to Katie Miras of Symantec for reporting this vulnerability. Ollie Whitehouse of Symantec is credited with discovering the vulnerability.
This document was written by Will Dormann.
|Date First Published:||2006-03-14|
|Date Last Updated:||2006-04-27 14:08 UTC|