Alert GCSA-09057 - Vulnerabilita' in Microsoft Office Publisher

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

     Alert ID : GCSA-09057
         Data : 15 Luglio 2009
       Titolo : Vulnerabilita' in Microsoft Office Publisher (MS09-030)

******************************************************************

:: Descrizione del problema

E' stata identificata una vulnerabilita' in Microsoft Office Publisher 2007,
che potrebbe essere sfruttata per compromettere un sitema vulnerabile.

Tale vulnerabilita' e' dovuta ad un errore di tipo pointer dereference
che potrebbe provocare una corruzione di memoria attraverso l'apertura
di file Publisher appositamente predisposti.


:: Software interessato

2007 Microsoft Office System Service Pack 1
Microsoft Office Publisher 2007 Service Pack 1


:: Impatto

Esecuzione di codice arbitrario
Possibile compromissione del sistema


:: Soluzioni

Applicare la patch rilasciata da Microsoft:
http://www.microsoft.com/downloads/details.aspx?familyid=d4b0665d-5744-49c7-a3c0-f231fd08d3b8


:: Riferimenti

Microsoft Security Bulletin MS09-030
http://www.microsoft.com/technet/security/Bulletin/MS09-030.mspx

US-CERT - Technical Cyber Security Alert TA09-160A
http://www.us-cert.gov/cas/techalerts/TA09-195A.html

Secunia
http://secunia.com/advisories/35779

VuPEN
http://www.vupen.com/english/advisories/2009/1888

Mitre's CVE ID
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0566

-----BEGIN PGP SIGNATURE-----

iQCVAwUBSl2xzPOB+SpikaiRAQLnUgP/WAnbKXkuF7Cu+EJ0AQc++UlNZrl4eDdo
lCGw3TZ9INGVpRtPwp5+6+ObdZgEXu1tOvtTzEWc1S/VCrDvV3fOfdyipTf9h6VE
qqiAYmhjD1yDgz7j1cKa6aSNKStNSZ49bOF4uAlDFANM+pW4OTLjz2dO/42hY9UM
47t9IWjLWs8=
=lqWn
-----END PGP SIGNATURE-----