|
|
Microsoft Word RTF Template存在宏可执行漏洞
发布时间：2001-05-25
更新时间：2001-05-25
严重程度：高
威胁程度：普通用户访问权限
错误类型：设计错误
利用方式：服务器模式
受影响系统Microsoft Word 98 for Mac
Microsoft Word 98
Microsoft Word 97 SR2
Microsoft Word 97 SR1
Microsoft Word 97
+ Microsoft Office 97
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
Microsoft Word 2001 for Mac
Microsoft Word 2000 SR2
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0SP6a
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP6
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP5
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP4
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP3
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP2
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP1
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0
- Microsoft Windows 2000 SP2
- Microsoft Windows 2000 SP1
- Microsoft Windows 2000
+ Microsoft Office 2000
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
- Microsoft Windows 2000
Microsoft Word 2000 SR1a
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0SP6a
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP6
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP5
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP4
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP3
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP2
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP1
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0
- Microsoft Windows 2000 SP2
- Microsoft Windows 2000 SP1
- Microsoft Windows 2000
+ Microsoft Office 2000
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
- Microsoft Windows 2000
Microsoft Word 2000 SR1
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0SP6a
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP6
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP5
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP4
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP3
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP2
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP1
+ Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0
- Microsoft Windows 2000 SP2
- Microsoft Windows 2000 SP1
- Microsoft Windows 2000
+ Microsoft Office 2000
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
- Microsoft Windows 2000
Microsoft Word 2000
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
- Microsoft Windows 2000
+ Microsoft Office 2000
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
- Microsoft Windows 2000 详细描述
Microsoft word没有很好的检查在RTF template文档中的宏，如果用户
访问一连接到基于RTF template而且其中嵌入宏的文档，宏就会不提醒用户
而直接执行。
测试代码
尚无
解决方案
下载补丁：
Microsoft Word 97 SR2:
Microsoft patch wd97mcrs
http://download.microsoft.com/download/word97win/Patch/4.71.1015.0/W98NT42KMe/EN-US/wd97mcrs.exe
Microsoft Word 97 SR1:
Microsoft patch wd97mcrs
http://download.microsoft.com/download/word97win/Patch/4.71.1015.0/W98NT42KMe/EN-US/wd97mcrs.exe
Microsoft Word 97:
Microsoft patch wd97mcrs
http://download.microsoft.com/download/word97win/Patch/4.71.1015.0/W98NT42KMe/EN-US/wd97mcrs.exe
Microsoft Word 2000 SR2:
Microsoft patch wd2kmsec
http://download.microsoft.com/download/word2000/wd2kmse/1/WIN98Me/EN-US/wd2kmsec.exe
Microsoft Word 2000 SR1a:
Microsoft patch wd2kmsec
http://download.microsoft.com/download/word2000/wd2kmse/1/WIN98Me/EN-US/wd2kmsec.exe
Microsoft Word 2000 SR1:
Microsoft patch wd2kmsec
http://download.microsoft.com/download/word2000/wd2kmse/1/WIN98Me/EN-US/wd2kmsec.exe
Microsoft Word 2000:
Microsoft patch wd2kmsec
http://download.microsoft.com/download/word2000/wd2kmse/1/WIN98Me/EN-US/wd2kmsec.exe
相关信息
|
