-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
AA-2008.0153                  AUSCERT Advisory

                                   [Win]
          Microsoft Office Word 2002 - Possible Execution of Code
                               10 July 2008
- ---------------------------------------------------------------------------

        AusCERT Advisory Summary
        ------------------------

Product:              Microsoft Office Word 2002 Service Pack 3
Operating System:     Windows
Impact:               Execute Arbitrary Code/Commands
Access:               Remote/Unauthenticated
CVE Names:            CVE-2008-2244
Member content until: Thursday, August 07 2008

OVERVIEW

        Microsoft has issued an advisory containing preliminary information 
        regarding a new zero-day vulnerability that has been reported in 
        Microsoft Office Word 2002 (XP) Service Pack 3.


IMPACT

        Microsoft has advised that there is an issue in Microsoft Word 2002
        with Service Pack 3 installed [1]. The vulnerabilty could allow code
        execution with the privileges of the user.

        Microsoft has stated the following products are not vulnerable: [1]

            * Microsoft Office Word 2000 Service Pack 3
            * Microsoft Office Word 2003 Service Pack 2
            * Microsoft Office Word 2003 Service Pack 3
            * Microsoft Office Word 2007
            * Microsoft Office Word 2007 Service Pack 1
            * Microsoft Office Word Viewer 2003
            * Microsoft Word Viewer 2003 Service Pack 3
            * Microsoft Office Compatibility Pack for Word, Excel, and 
               PowerPoint 2007 File Formats
            * Microsoft Office Compatibility Pack for Word, Excel, and 
               PowerPoint 2007 File Formats Service Pack 1
            * Microsoft Office for Mac 2004
            * Microsoft Office for Mac 2008


MITIGATION

        Currently no patch is available.  It is recommended not to open
        attachments from untrusted users.

        You can download one of the free Microsoft Office File Viewers to 
        view documents.

        The file viewers are available from:

            Viewer 2007
            <http://www.microsoft.com/downloads/details.aspx?FamilyId=3657CE88-7CFA-457A-9AEC-F4F827F20CAC&displaylang=en>

            Viewer 2003 Service Pack 3
            <http://www.microsoft.com/downloads/details.aspx?FamilyId=C6E56E97-17D7-4C48-9B2E-474CB3CDCC45&displaylang=en>

            Viewer 2003
            <http://www.microsoft.com/downloads/details.aspx?FamilyId=95E24C87-8732-48D5-8689-AB826E7B8FDF&displaylang=en>


REFERENCES

        [1] Microsoft Security Advisory 953635
            http://www.microsoft.com/technet/security/advisory/953635.mspx

AusCERT has made every effort to ensure that the information contained
in this document is accurate.  However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBSHWDyCh9+71yA2DNAQIgGAP+O8ooPjQVUgNCS90PP2YZl7RHXgD7GexX
qXqcfrR3tdb0iYRRcaDQLLYVjPRqLMRQsxiHBTn2XGbpqG528QrVeBSe82ugXb+d
WDJy5Poz2r7va5rIGrUXsxu+MGPwgtJmeDLVOWwwYM+DDt6jR4gEqLPFtaNxE32z
fwP8Hy0HgFQ=
=u9ih
-----END PGP SIGNATURE-----