Microsoft East Asian Word转换漏洞

漏洞信息详情

Microsoft East Asian Word转换漏洞

• CNNVD编号：CNNVD-200001-050
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2000-0088
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2000-01-20
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-12
  
• 厂        商：
  
  microsoft
• 漏洞来源：
  Publicized in Micr…

Word 5中日语，韩语，中文的转换工具存在缓冲区溢出漏洞。攻击者利用此漏洞可以执行命令，又称为\”Malformed Conversion Data\”漏洞。

Microsoft has released patches for this issue, available at:
– Word 97 or 98, PowerPoint 98: –
US:
http://officeupdate.microsoft.com/downloaddetails/ww5pkg.htm
Japan:
http://officeupdate.microsoft.com/japan/downloaddetails/MalformedData-97.htm
Korea:
http://officeupdate.microsoft.com/korea/downloaddetails/MalformedData-97.htm
China:
http://officeupdate.microsoft.com/china/downloaddetails/MalformedData-97.htm
Taiwan:
http://officeupdate.microsoft.com/taiwan/downloaddetails/MalformedData-97.htm
Hong Kong:
http://officeupdate.microsoft.com/hk/downloaddetails/MalformedData-97.htm
– Converter Pack 2000; Office 2000 with Multilanguage Pack; Word 2000, PowerPoint 2000: –
US:
http://officeupdate.microsoft.com/2000/downloaddetails/ww5pkg.htm
Japan:
http://officeupdate.microsoft.com/japan/downloaddetails/2000/MalformedData-2K.htm
Korea:
http://officeupdate.microsoft.com/korea/downloaddetails/2000/MalformedData-2K.htm
China:
http://officeupdate.microsoft.com/china/downloaddetails/2000/MalformedData-2K.htm
Taiwan:
http://officeupdate.microsoft.com/taiwan/downloaddetails/2000/MalformedData-2K.htm
Hong Kong:
http://officeupdate.microsoft.com/hk/downloaddetails/2000/MalformedData-2K.htm

来源: BID
名称: 946
链接:http://www.securityfocus.com/bid/946

来源: MS
名称: MS00-002
链接:http://www.microsoft.com/technet/security/bulletin/ms00-002.mspx