Open Vulnerability and Assessment Language (OVAL)
Offical Language Release Repository Downloads News — November 5, 2009 Search
link to OVAL home page
 OVAL Repository > View Definition

View Definition

Definition Id: oval:org.mitre.oval:def:798 Date: 2007-04-23
Title: Office XP Remote Code Execution via Malformed Routing Slip
Description: Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
Version: 3 Class: vulnerability
Status: ACCEPTED Reference(s): CVE-2006-0009
Family: windows
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003		 Product(s): Microsoft Office
Definition Synopsis:

 

OVAL is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

The OVAL Web site is hosted by The MITRE Corporation.

Copyright 2002-2009, The MITRE Corporation. All rights reserved. OVAL and the OVAL logo are registered trademarks of The MITRE Corporation.

Contact oval@mitre.org for more information.
Privacy policy
Terms of use