Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3847, CVE-2013-3848, and CVE-2013-3858.

The remote Windows host is running a version of Microsoft Office, Microsoft Word, Office Compatibility Pack, or Microsoft Word Viewer that is affected by the following remote code execution vulnerabilities :

  - A remote code execution vulnerability exists due to the     way the XML parser used by Word resolves external     entities. (CVE-2013-3160)

  - Remote code execution vulnerabilities exist due to     memory corruption issues in the way that Microsoft     Office parses files.
    (CVE-2013-3847, CVE-2013-3848, CVE-2013-3849,     CVE-2013-3850, CVE-2013-3851, CVE-2013-3852,     CVE-2013-3853, CVE-2013-3854, CVE-2013-3855,     CVE-2013-3856, CVE-2013-3857, CVE-2013-3858)

If an attacker can trick a user on the affected host into opening a specially crafted file, it may be possible to leverage these issues to read arbitrary files on the target system or execute arbitrary code, subject to the user's privileges.

The versions of Office SharePoint Server, SharePoint Server, Windows SharePoint Services, SharePoint Foundation, or Office Web Apps installed on the remote host are affected by multiple vulnerabilities :

  - A denial of service vulnerability exits that could cause     the W3WP process to stop responding. (CVE-2013-0081)

  - A remote code execution vulnerability exists in the way     Microsoft Office Services and Web Apps parse content in     specially crafted files. (CVE-2013-1315)

  - A remote code execution vulnerability exists in the way     SharePoint Server handles unassigned workflows.
    (CVE-2013-1330)

  - An unspecified cross-site scripting vulnerability     exists. (CVE-2013-3179)

  - An unspecified POST cross-site scripting vulnerability     exists. (CVE-2013-3180)

  - Multiple memory corruption vulnerabilities exist in the     way that Microsoft Office software parses specially     crafted files. (CVE-2013-2847, CVE-2013-3848,     CVE-2013-3849, CVE-2013-3857, CVE-2013-3858)

ID	Name	Product	Family	Type	Severity
69832	MS13-072: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2845537)	Nessus	Windows : Microsoft Bulletins	Local	high
69827	MS13-067: Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2834052)	Nessus	Windows : Microsoft Bulletins	Local	critical

Detections

Analytics

CVE-2013-3849

high

Tenable Plugins

high

critical