Vulnerability

    MS Word

Affected

    Word 2000 up to (but not including) 9.0.4402

Description

    Oliver Reeves found  following.  He  was playing around  with word
    this  morning,  and  found  something  quite  interesting.  We can
    consistently crash Word 2000 using the following method:

        1) Open up any text/document editor such as notepad or wordpad
        2) type a single word (must be a known word, no punctuation).
        3) highlight the whole word and CTRL+C
        4) launch word 2000
        5) CTRL+V
        6) press HOME to take you to the start of the line
        7) type I
        8) hit the space bar

    This  consistenly  crashes  Word  2000  with  the  following error
    message:

        DDE Server Window: WINWORD.EXE - Application Error
        The instruction at "0x3076a63e" referenced memory at "0x00000000".  The
        memory could not be "read".

Solution

    See TID# Q265007 at support.microsoft.com,  Known issue, fixed  in
    SR-2.   Word 2K  All versions  up to  (but not including) 9.0.4402
    SR-1 have this problem.  From 9.0.4402 SR-1 onwards it appears  to
    be fixed.