(MS09-068) Vulnerability in Microsoft Office Word Allows Remote Code Execution (976307)

A remote code execution vulnerability exists in Microsoft Office Word.

The vulnerability is in the way that Microsoft Office Word handles a specially crafted Word file with a malformed record. Successful exploitation of the vulnerability could allow an attacker to take complete control of an affected system. The attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Malicious remote network traffic

no user interaction is needed

Responded and patched

Office for Mac   2004,
Office for Mac   2008,
Office Word Viewer   2003,
Open XML File Format Converter for Mac   1.0,