Malicious RTF Files Exploit Microsoft Office Vulnerability

[Peaches]

Dec14

Malicious RTF Files Exploit Microsoft Office Vulnerability

A stack-based buffer overflow vulnerability in Microsoft Office was recently discovered to be actively exploited in the wild. Trend Micro now detects the exploit RTF files as TROJ_ARTIEF.SM.

The malicious RTF files have shell codes designed to overflow the stack and cause Microsoft Word to crash. As a result, malicious users could execute arbitrary commands on the affected system.

Microsoft already released an update to address the said vulnerability. Users are strongly advised to download and install the patch, which can be found in the official bulletin MS10-087. This was issued as part of November's Patch Tuesday.

http://blog.trendmicro.com/