vendor:
Microsoft Office
by:
Google Security Research
5.5
CVSS
MEDIUM
Memory Corruption
119
CWE
Product Name: Microsoft Office
Affected Version From: Microsoft Office 2007
Affected Version To: Microsoft Office 2007
Patch Exists: No
Related CWE:
CPE: a:microsoft:office:2007
Platforms Tested: Windows Server 2003, Windows 7
Unknown
Access Violation in Microsoft Office 2007
An access violation was observed in Microsoft Office 2007 (Word document) due to a memcpy with an invalid source buffer. The crash occurs because of an invalid size being used in a pointer calculation in wwlib.dll.
Mitigation:
Apply the latest security updates and patches from Microsoft.