Trend Micro Security

Microsoft Office WPS Converter Heap Overflow Vulnerability (CVE-2012-0177)

2015年7月21日
  危険度: : 緊急
  CVE識別番号: CVE-2012-0177,MS12-028

  概要

Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attackers to execute arbitrary code via a crafted Works (aka .wps) file, aka "Office WPS Converter Heap Overflow Vulnerability."

  トレンドマイクロの対策

Apply associated Trend Micro DPI Rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1004972
  Trend Micro Deep Security DPI Rule Name: 1004972 - Microsoft Office WPS Converter Heap Overflow Vulnerability (CVE-2012-0177)

  影響を受けるソフトウェア

  • microsoft office 2007
  • microsoft works 9.0
  • microsoft works_6-9_file_converter -