• 공개일 : 2009-12-09
• 변경일 : 2010-07-20
• 위험도 : 낮음
• 공격 범위 : 인터넷, 사용자가 공격자에게 접근해야 공격 가능
• 피해 유형 : 무결성 훼손, 기밀 유출, 가용성 침해

Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a DOC file with an invalid number of property names in the DocumentSummaryInformation stream, which triggers a heap-based buffer overflow.

• IDEFENSE, 20091208 Microsoft WordPad Word97 Converter Integer Overflow Vulnera..
• CONFIRM, http://support.avaya.com/css/P8/documents/100070184
• CERT, TA09-342A
• MS 보안 권고문, 패치, MS09-073
• BID, 37216

• Microsoft windows_xp sp3
• Microsoft windows_xp sp2:x64
• Microsoft windows_xp sp2
• Microsoft windows_server_2003 sp2:itanium
• Microsoft windows_server_2003 sp2:x64
• Microsoft windows_server_2003 sp2
• Microsoft windows_2000 sp4
• Microsoft Works 8.5
• Microsoft wordpad
• Microsoft office_word 2003 sp3
• Microsoft office_word 2002 sp3
• Microsoft office_converter_pack