Metasploit Revealed: Secrets of the Expert Pentester

Word-based exploits

Word-based exploits focus on various file formats that we can load into Microsoft Word. However, a few file formats execute malicious code and can let the attacker gain access to the target system. We can take advantage of Word-based vulnerabilities in exactly the same way as we did for PDF files. Let's quickly see some basic facts related to this vulnerability:

Test cases	Description
Vulnerability	The pFragments shape property within the Microsoft Word RTF parser is vulnerable to stack-based buffer overflow
Exploited on operating system	Windows 7 32-bit
Software version in our environment	Microsoft Word 2007
Affected versions	Microsoft Office XP SP Microsoft Office 2003 SP 3 Microsoft Office 2007 SP 2