Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a malformed record that triggers memory corruption, aka "Word Buffer Overflow Vulnerability."

The remote Mac OS X host is running a version of Microsoft Office that is affected by several vulnerabilities.

If an attacker can trick a user on the affected host into opening a specially crafted Excel, PowerPoint, or Word file, these issues could be leveraged to execute arbitrary code subject to the user's privileges.

The remote Windows host is running a version of Microsoft Word or Word Viewer that is affected by two buffer overflow vulnerabilities.
If an attacker can trick a user on the affected host into opening a specially crafted Word file, he could leverage these issues to execute arbitrary code subject to the user's privileges.

ID	Name	Product	Family	Severity
50062	MS09-017 / MS09-021 / MS09-027: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (967340 / 969462 / 969514) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
39349	MS09-027: Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (969514)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2009-0565

high

Tenable Plugins

high

high