CVE:CVE-2007-1202
CNNVD:CNNVD-200705-136
Microsoft Word是Office套件中的文字处理工具。
Word在处理RTF文档中某些文字的属性字符串时存在堆破坏漏洞，在某些环境下，这些属性字符串可能被写入到已经释放的内存区域中，触发堆破坏，导致在受影响主机上执行任意指令。
solution:Upgrade microsoft word to a higher version than 2000:sp3,2002:sp3,2003:sp2,2004,and avoid the version 2000:sp3,2002:sp3,2003:sp2,2004; Upgrade microsoft word_viewer to a higher version than 2003,and avoid the version 2003; Upgrade microsoft works to a higher version than 2004,2005,2006,and avoid the version 2004,2005,2006