JVN#70858401
Buffer overflow vulnerability in Microsoft Works converters
Critical
Overview
Microsoft Works converters contain a buffer overflow vulnerability.
Products Affected
- Microsoft Office 2000 Service Pack 3
- Microsoft Office XP Service Pack 3
- Microsoft Office 2003 Service Pack 3
- 2007 Microsoft Office System Service Pack 1
- Microsoft Works 8.5
- Microsoft Works 9
Description
Microsoft Works converters contain a buffer overflow vulnerability when processing Works (.wps) files.
Impact
If a user opens a malicious Works file, an attacker may execute arbitrary code.
Solution
Update the software
Update to latest version according to the information provided by Microsoft.
Vendor Status
JPCERT/CC Addendum
The security update for this vulnerability is contained in the Microsoft Security Bulletin Summary for June 2009.Vulnerability Analysis by JPCERT/CC
Analyzed on 2009.06.11 Critical
| Measures | Conditions | Severity |
|---|---|---|
| Access Required | Routed - can be attacked over the Internet using packets |
|
| Authentication | None - anonymous or no authentication (IP addresses do not count) |
|
| User Interaction Required | Simple - the user must be convinced to take a standard action that does not feel harmful to most users, such as click on a link or view a file |
|
| Exploit Complexity | Low-Medium - some expertise and/or luck required (most buffer overflows, guessing correctly in small space, expertise in Windows function calls) |
|
Credit
Yuji Ukai of Fourteenforty Research Institute, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Other Information
| JPCERT Alert |
JPCERT-AT-2009-0011 June 2009 Microsoft Security Bulletin (including six critical patches) |
| JPCERT Reports | |
| CERT Advisory |
Technical Cyber Security Alert TA09-160A Microsoft Updates for Multiple Vulnerabilities |
| CPNI Advisory | |
| TRnotes | |
| CVE |
CVE-2009-1533 |
| JVN iPedia |
JVNDB-2009-000039 |