发布日期：2005-02-08
更新日期：2005-02-13

受影响系统：

Microsoft Office XP SP3
Microsoft Office XP SP2
Microsoft Office XP SP1
Microsoft Office XP
    - Microsoft Windows XP Professional SP1
    - Microsoft Windows XP Professional
    - Microsoft Windows XP Home SP2
    - Microsoft Windows XP Home SP1
    - Microsoft Windows NT 4.0 SP6a
    - Microsoft Windows ME
    - Microsoft Windows 2003 Web Edition
    - Microsoft Windows 2003 Standard Edition
    - Microsoft Windows 2003 Enterprise Edition 64-bit
    - Microsoft Windows 2003 Enterprise Edition
    - Microsoft Windows 2003 Datacenter Edition 64-bit
    - Microsoft Windows 2003 Datacenter Edition
    - Microsoft Windows 2000 Server SP4
    - Microsoft Windows 2000 Server SP3
    - Microsoft Windows 2000 Professional SP4
    - Microsoft Windows 2000 Professional SP3
    - Microsoft Windows 2000 Datacenter Server SP4
    - Microsoft Windows 2000 Datacenter Server SP3
    - Microsoft Windows 2000 Advanced Server SP4
    - Microsoft Windows 2000 Advanced Server SP3

不受影响系统：

Microsoft Office 2003
Microsoft Office 2000

描述：

---

CVE(CAN) ID: CVE-2004-0848

Microsoft Office是微软公司提供的办公软件。

Microsoft Office XP软件存在一个缓冲区溢出问题，远程攻击者可以利用这个漏洞构建恶意OFFICE文档，诱使用户处理，控制目标用户系统。

目前没有详细漏洞细节提供。

<*来源：Rafel Ivgi （nuritrv18@bezeqint.net）
  
  链接：http://www.microsoft.com/technet/security/bulletin/ms05-005.mspx
*>

建议：

---

厂商补丁：

Microsoft
---------
Microsoft已经为此发布了一个安全公告（MS05-005）以及相应补丁:
MS05-005：Vulnerability in Microsoft Office XP could allow Remote Code Execution (873352)
链接：http://www.microsoft.com/technet/security/bulletin/ms05-005.mspx

补丁下载：

Microsoft Office XP Software Service Pack 3

http://www.microsoft.com/downloads/details.aspx?FamilyId=A0115BF8-5F80-43E9-BE28-24D344600D69

Microsoft Office XP Software Service Pack 2

http://www.microsoft.com/downloads/details.aspx?FamilyId=A0115BF8-5F80-43E9-BE28-24D344600D69

Microsoft Office XP Software:

Word 2002

PowerPoint 2002


Microsoft Project 2002

http://www.microsoft.com/downloads/details.aspx?FamilyId=9FB0B8CC-593A-4955-9AF1-84AD2664E3AC

Microsoft Visio 2002

http://www.microsoft.com/downloads/details.aspx?FamilyId=07EB60C3-D38A-4130-BC44-6C8511ECADB9

Microsoft Works Suite 2002

http://www.microsoft.com/downloads/details.aspx?FamilyId=A0115BF8-5F80-43E9-BE28-24D344600D69

Microsoft Works Suite 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=A0115BF8-5F80-43E9-BE28-24D344600D69

Microsoft Works Suite 2004

http://www.microsoft.com/downloads/details.aspx?FamilyId=A0115BF8-5F80-43E9-BE28-24D344600D69

浏览次数：3255
严重程度：6（网友投票）