CVE-2010-1903

Microsoft Office Word 2002 SP3 y 2003 SP3, y Office Word Viewer, permite a atacantes remotos ejecutar código a su elección o causar una denegación de servicio (corrupción de memoria) a través de un registro mal formado en un fichero Word, también conocido como "Vulnerabilidad Word HTML Linked Objects Memory Corruption."

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the code responsible for parsing the plcffldMom structure within .doc files. By crafting malicious values within this structure an attacker can force the program to make faulty heap memory allocations. This can be leveraged to execute remote code under the context of the user running the application.