bugtraq - Re: Word 2003 SP2 .doc fork bomb on WinXP SP3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Fri, 8 Nov 2013 20:01:45 +0100
From: "Stefan Kanthak" <stefan.kanthak@...go.de>
To: <jsibley1@...il.com>
Cc: <bugtraq@...urityfocus.com>
Subject: Re: Word 2003 SP2 .doc fork bomb on WinXP SP3

Someone without a name wrote:

> # Exploit Title:     Word 2003 SP2 .doc fork bomb on WinXP SP3

[...]

> # Tested on:         Windows XP SP3 & Word 2003 SP2 (11.6568.6568)      

OUCH!

The current service pack for Office 2003 and Word 2003 is SP3.
The current version of Word 2003 is 11.0.8407, see
<https://support.microsoft.com/kb/2826020> alias
<http://technet.microsoft.com/security/bulletin/MS13-086>

Whoever uses outdated and vulnerable versions of products is just stupid!

Stefan Kanthak