MS05-005: Vulnerability in Microsoft Office XP could allow Remote Code Execution (873352)
High Nessus Plugin ID 16332
SynopsisArbitrary code can be executed on the remote host through the Office client.
DescriptionThe remote host is running a version of Microsoft Office that could allow an attacker to execute arbitrary code on the remote host.
To exploit this flaw, an attacker would need to send a specially crafted file to a user on the remote host and wait for him to open it using Microsoft Office.
When opening the malformed file, Microsoft Office will encounter a buffer overflow which may be exploited to execute arbitrary code.
SolutionMicrosoft has released a patch for Office XP.