<em style='font-weight:bold;'>(Description Provided by <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-0563" target="_blank">CVE</a>)</em> : Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a crafted tag containing an invalid length field, aka &quot;Word Buffer Overflow Vulnerability.&quot;

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

• Security Tracker: 1022356
• CVE ID: 2009-0563 (see also: NVD)
• Bugtraq ID: 35188
• Secunia Advisory ID: 35377
• Related OSVDB ID: 54959 54960
• Microsoft Knowledge Base Article: 969514 969600 969602 969603 969604 969613 969614 969661 971822 971824
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2009-06/0117.html
  http://www.securityfocus.com/archive/1/archive/1/504204/100/0/threaded
• Other Advisory URL: http://labs.alienvault.com/labs/index.php/2012/ms-office-exploit-that-targets-macos-x-seen-in-the-wild-delivers-mac-control-rat/
  http://www.vupen.com/english/advisories/2009/1546
  http://www.zerodayinitiative.com/advisories/ZDI-09-035
• News Article: http://www.computerworld.com/s/article/9225662/Malware_infects_Macs_through_Microsoft_Office_vulnerability
• Microsoft Security Bulletin: MS09-027
• CERT: TA09-160A

• wushi - Zero Day Initiative (ZDI)