Bugtraq mailing list archives
Re: The newest Word flaw is due to malformed data structure handling
From: "Dave \"No, not that one\" Korn" <davek_throwaway () hotmail com>
Date: Tue, 12 Dec 2006 14:31:20 -0000
Juha-Matti Laurio wrote:
Related to the newest MS Word 0-day http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx US-CERT Vulnerability Note VU#166700 released today lists the following new technical detail: "Microsoft Word fails to properly handle malformed data structures allowing memory corruption to occur." http://www.kb.cert.org/vuls/id/166700 - Juha-Matti
That's kind-of a truism, since word files basically /are/ serialised data structures. Well, assuming we're not talking about some new xml format but native word .doc format. cheers, DaveK -- Can't think of a witty .sigline today....
Current thread:
- The newest Word flaw is due to malformed data structure handling Juha-Matti Laurio (Dec 11)
- Re: The newest Word flaw is due to malformed data structure handling Alexander Sotirov (Dec 12)
- Re: The newest Word flaw is due to malformed data structure handling Dave "No, not that one" Korn (Dec 12)
- <Possible follow-ups>
- Re: Re: The newest Word flaw is due to malformed data structure handling test (Dec 12)
- Re: The newest Word flaw is due to malformed data structure handling Steven M. Christey (Dec 14)
- Re: The newest Word flaw is due to malformed data structure handling Juha-Matti Laurio (Dec 14)