PT-2013-6117 · Microsoft · Office Word

Publicado 2013-11-16 · Atualizado 2013-11-19 · CVE-2013-6801

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2003 SP2 and SP3

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by using a malformed .doc file that contains an embedded image. This is related to a "fork bomb" issue, where an attacker can cause the system to consume excessive resources.

Recommendations For Microsoft Word 2003 SP2, avoid opening untrusted .doc files until a fix is available. For Microsoft Word 2003 SP3, avoid opening untrusted .doc files until a fix is available. As a temporary workaround, consider restricting the use of embedded images in .doc files to minimize the risk of exploitation.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2013-6801

Produtos afetados

Office Word

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2013-11/0038.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-6801 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2013-11/0045.html · Nota
• http://archives.neohapsis.com/archives/bugtraq/2013-11/0035.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6801 · Nota