CVE-2006-1311: Microsoft RichEdit Remote Code Execution via Malformed OLE Object

From this webpage screenshot, the following key vulnerability information can be obtained: Vulnerability Note: VU#368132 Vulnerability: Microsoft RichEdit vulnerable to remote code execution via malformed embedded OLE object Release Date: 2007-02-14 Description: RichEdit 6.0 is a facility for obtaining plain/rich-text, single/multiline Unicode/ANSI edit controls and combo/list boxes in a single worldwide binary that runs on all Windows operating systems. A remote code execution vulnerability exists in the RichEdit components shipped with Microsoft Windows and Microsoft Office. An attacker may exploit this vulnerability by convincing a user to open a specially crafted Rich Text Format (RTF) file containing an embedded malformed OLE object. Note that Microsoft states an attacker would need to persuade a user to open a malicious file or email attachment to exploit this vulnerability. Solution: Microsoft has released an update to address this issue. See Microsoft Security Bulletin MS07-013 for more details. Do not allow WordPad to parse embedded files. Microsoft WordPad is the default application for opening and interacting with RTF files in Microsoft Windows. Preventing WordPad from parsing embedded OLE objects in RTF files may mitigate this vulnerability. See the workarounds section of Microsoft Security Bulletin MS07-013 for instructions on how to edit the Windows registry to prevent WordPad from parsing these objects. Do not run Windows with administrator privileges. CVSS Metrics: Base Severity Metric: 16.71 CVE IDs: CVE-2006-1311 Acknowledgements: Thanks to Microsoft for information used in this report. Date Public: 2007-02-13 Date First Published: 2007-02-14 Date Last Updated: 2007-02-23 14:03 UTC

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2006-1311: Microsoft RichEdit Remote Code Execution via Malformed OLE Object