int(3004)

Vulnerability Bulletins


Denegación de servicio en Microsoft Word

Vulnerability classification

Property Value
Confidence level Oficial
Impact Denegación de Servicio
Dificulty Principiante
Required attacker level Acceso remoto sin cuenta a un servicio exotico

System information

Property Value
Affected manufacturer Microsoft
Affected software Microsoft Word 2000

Description

Se ha descubierto una vulnerabilidad en Microsoft Word 2000. La vulnerabilidad reside en un error no especificado.

Un atacante remoto podría causar una denegación de servicio mediante métodos de ataque desconocidos.

El boletín MS08-026 sustituye al MS07-024.

Solution



Actualización de software

Microsoft
Microsoft Word 2000
http://www.microsoft.com/downloads/details.aspx?FamilyId=F25020F5-17C7-4A60-9088-944FFACB5F19
Microsoft Word 2002
http://www.microsoft.com/downloads/details.aspx?FamilyId=0FE4F405-A568-4F15-B2C6-02D4A4B58E43
Microsoft Word 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=6870245D-4618-4504-BFFC-878635267059
Microsoft Word Viewer 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=24547C65-C29A-4D0A-A015-F3F08B24331F
Microsoft Office 2004 Mac
http://www.microsoft.com/mac
Microsoft Works Suite 2004
http://www.microsoft.com/downloads/details.aspx?FamilyId=0FE4F405-A568-4F15-B2C6-02D4A4B58E43
Microsoft Works Suite 2005
http://www.microsoft.com/downloads/details.aspx?FamilyId=0FE4F405-A568-4F15-B2C6-02D4A4B58E43
Microsoft Works Suite 2006
http://www.microsoft.com/downloads/details.aspx?FamilyId=0FE4F405-A568-4F15-B2C6-02D4A4B58E43

Standar resources

Property Value
CVE CVE-2007-0870
BID 22567

Other resources

Microsoft Security Advisory (933052)
http://www.microsoft.com/technet/security/advisory/933052.mspx

Microsoft Security Bulletin MS07-024
http://www.microsoft.com/technet/security/bulletin/ms07-024.mspx

Microsoft Security Bulletin (MS08-026)
http://www.microsoft.com/technet/security/bulletin/ms08-026.mspx

Version history

Version Comments Date
1.0 Aviso emitido 2007-02-16
1.1 Aviso emitido por Microsoft (MS07-024) 2007-05-09
1.2 Aviso emitido por Microsoft (MS08-026). Descripción actualizada. 2008-05-14
Ministerio de Defensa
CNI
CCN
CCN-CERT