Microsoft Office Denial of Service Vulnerability

A vulnerability was identified in Microsoft Office. A remote user can cause denial of service conditions.

A remote user can send a specially crafted XML document that, when processed by the target application, will trigger an entity expansion flaw to consume excessive memory resources and cause the application to hang.

This can be exploited by sending email to the target user to cause the target user's Outlook to freeze when opening the email.

An XML Document Type Definition (DTD) containing several nested entities can trigger this flaw.

* NOTE : No patch is available.