Published: 2008-07-20T06:36+00:00    Last Updated: 2008-08-14T07:37+00:00

TRJVN-2008-04
Vulnerability in Microsoft Word

Overview

Microsoft has released a Security Update MS08-042 to address a vulnerability in Microsoft Word.

Event Information

Date (UTC)Description
2008-08-13 02:39 Microsoft
MS08-AUG: Microsoft Security Bulletin Summary for August 2008
Included in this advisory are updates for newly discovered vulnerabilities.
2008-08-13 02:39 Microsoft
Microsoft Security Advisory (953635): Vulnerability in Microsoft Word Could Allow Remote Code Execution
Word Record Parsing Vulnerability (MS08-042, CVE-2008-2244)
Microsoft has completed the investigation into a public report of this vulnerability. We have issued MS08-042 to address this issue.
2008-07-09 10:04 Trend Micro
Let the Games Begin
TrendLabs | Malware Blog - by Trend Micro
2008-07-09 03:13 Microsoft
Microsoft Security Advisory (953635): Vulnerability in Microsoft Word Could Allow Remote Code Execution
Word Record Parsing Vulnerability (MS08-042, CVE-2008-2244)
Advisory published.
Microsoft is investigating new public reports of a possible vulnerability in Microsoft Office Word 2002 Service Pack 3.
2008-07-09 02:20 SANS Internet Storm Center
Unpatched Word Vulnerability (Version: 1)
What a busy day! Microsoft just released an advisory with details about a new vulnerability in Word, which is currently being exploited in targeted attacks.
2008-07-09 Trend Micro
TROJ_MDROPPER.ZT
Exploit for Word Record Parsing Vulnerability (MS08-042, CVE-2008-2244)
2008-07-08 13:01 US-CERT
Microsoft Releases Security Advisory for Word Vulnerability
US-CERT Current Activity
Microsoft has released a Security Advisory to address a vulnerability in Microsoft Word. The advisory indicates that this vulnerability affects Microsoft Office Word 2002 Service Pack 3. By convincing a user to open a specially crafted Word file, a remote attacker may be able to execute arbitrary code or cause a denial-of-service condition. Additionally, the advisory indicates that Microsoft is aware of limited, targeted attacks attempting to exploit this vulnerability.
2008-07-08 06:55 Microsoft Security Response Center Blog
Microsoft Security Advisory 953635

Other Information