Microsoft Office Word Stack-Based Buffer Overflow Vulnerability (CVE-2009-0563) Technical Advisory

# Query Windows Update for missing security patches
$UpdateSession = New-Object -ComObject Microsoft.Update.Session
$UpdateSearcher = $UpdateSession.CreateUpdateSearcher()
$SearchResult = $UpdateSearcher.Search('IsInstalled=0 and Type=Software')

# Filter for MS09-027 related updates or general Office security updates
$OfficeUpdates = $SearchResult.Updates | Where-Object { $_.Title -like '*Office*' -or $_.Title -like '*Word*' }
if ($OfficeUpdates) {
    Write-Host 'Pending Office Security Updates found. Please apply patches immediately.' -ForegroundColor Red
    $OfficeUpdates | Select-Object Title, KBArticleIDs
} else {
    Write-Host 'No pending Office updates detected.' -ForegroundColor Green
}

Windows Registry Editor Version 5.00

; Block opening of older Word document formats in Word 2007
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Word\Security\FileOpenBlock]
"FilesBeforeV9"=dword:00000002
"Converters"=dword:00000002

# Retrieve and verify the file version of winword.exe
$WordPath = (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Winword.exe' -ErrorAction SilentlyContinue).'(Default)'
if ($WordPath) {
    $VersionInfo = (Get-Item $WordPath).VersionInfo
    Write-Host "Product: $($VersionInfo.ProductName)"
    Write-Host "File Version: $($VersionInfo.FileVersion)"
    # Compare the version against the patched baselines specified in MS09-027
} else {
    Write-Host 'Microsoft Word is not installed or the path could not be resolved.'
}