CERTA-2005-AVI-139

Vulnerability from certfr_avis - Published: 2005-04-13 - Updated: 2005-04-13

None

Description

Selon Microsoft, deux vulnérabilités de type débordement de mémoire sont présentes dans Microsoft Word.

En incitant un utilisateur à visualiser, au moyen d'un logiciel Microsoft Word vulnérable, des fichiers astucieusement constitués, un utilisateur mal intentionné peut réaliser l'exécution de code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs.

None
Impacted products
Vendor Product Description
Microsoft N/A Microsoft Word 2002, Microsoft Works Suite 2002 ;
Microsoft Office Microsoft Office Word 2003 ;
Microsoft N/A Microsoft Works Suite 2001 ;
Microsoft N/A Microsoft Works Suite 2004.
Microsoft N/A Microsoft Word 2000 ;
Microsoft N/A Microsoft Works Suite 2003 ;
References

Show details on source website

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Word 2002, Microsoft Works Suite 2002 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Office Word 2003 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Works Suite 2001 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Works Suite 2004.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Word 2000 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Works Suite 2003 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nSelon Microsoft, deux vuln\u00e9rabilit\u00e9s de type d\u00e9bordement de m\u00e9moire sont\npr\u00e9sentes dans Microsoft Word.\n\nEn incitant un utilisateur \u00e0 visualiser, au moyen d\u0027un logiciel\nMicrosoft Word vuln\u00e9rable, des fichiers astucieusement constitu\u00e9s, un\nutilisateur mal intentionn\u00e9 peut r\u00e9aliser l\u0027ex\u00e9cution de code arbitraire\n\u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs.\n",
  "cves": [],
  "initial_release_date": "2005-04-13T00:00:00",
  "last_revision_date": "2005-04-13T00:00:00",
  "links": [
    {
      "title": "Bulletin de securit\u00e9 de Microsoft MS05-023 du 12 avril    2005:",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS05-023.mspx"
    }
  ],
  "reference": "CERTA-2005-AVI-139",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-04-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    }
  ],
  "summary": null,
  "title": "Multiples vuln\u00e9rabilit\u00e9s de Microsoft Word",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS05-023 de Microsoft",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…