鬼仔's Blog

来源：sowhat的blog

SANS Warns of Critical MS Word Vulnerability

SANS通报了一个新的Word洞洞,称已经上报给MS了. 还好只影响2000和2003.
推荐使用2003的同学,启用MOICE.
使用2000的同学, 送你8个字, “人为刀俎 你是鱼肉”

漏洞概述
“SANS reported that the memory corruption vulnerability is linked to Word’s handling of unordered or bulleted lists and said an attack utilizing a specially crafted Word document containing such a list could be used to trigger the issue.”