PT-2013-6117 · Microsoft · Office Word

Published 2013-11-16 · Updated 2013-11-19 · CVE-2013-6801

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2003 SP2 and SP3

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by using a malformed .doc file that contains an embedded image. This is related to a "fork bomb" issue, where an attacker can cause the system to consume excessive resources.

Recommendations For Microsoft Word 2003 SP2, avoid opening untrusted .doc files until a fix is available. For Microsoft Word 2003 SP3, avoid opening untrusted .doc files until a fix is available. As a temporary workaround, consider restricting the use of embedded images in .doc files to minimize the risk of exploitation.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2013-6801

Affected Products

Office Word

References · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2013-11/0038.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-6801 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2013-11/0045.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2013-11/0035.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6801 · Note