This host is installed with Microsoft Office (with MS Word), which is prone to remote code execution vulnerability.

Remote attacker could exploit by persuading victim to open a crafted documents to corrupt memory and cause the application to crash, and also allow to execute arbitrary code with the system privileges of the victim. Impact Level : System

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link. http://www.microsoft.com/technet/security/bulletin/ms08-042.mspx

Flaw is due to an error within the handling of malformed/crafted MS Word documents.

Microsoft Word 2002 (XP) with SP3 on Windows (All). Microsoft Word 2003 with SP3 on Windows (All).

• http://secunia.com/advisories/30975
• http://www.frsirt.com/english/advisories/2008/2028
• http://www.microsoft.com/technet/security/advisory/953635.mspx
• http://www.microsoft.com/technet/security/bulletin/ms08-042.mspx
• http://xforce.iss.net/xforce/xfdb/43663

---

Updated on 2015-03-25