Vulnerability Description
Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Office | 2000 |
| Microsoft | Office Compatibility Pack For Word Excel Ppt 2007 | All versions |
| Microsoft | Word Viewer | 2003 |
Related Weaknesses (CWE)
References
- http://marc.info/?l=bugtraq&m=121129490723574&w=2
- http://secunia.com/advisories/30143Vendor Advisory
- http://www.kb.cert.org/vuls/id/543907US Government Resource
- http://www.securityfocus.com/archive/1/492020/100/0/threaded
- http://www.securityfocus.com/bid/29104
- http://www.securitytracker.com/id?1020013
- http://www.us-cert.gov/cas/techalerts/TA08-134A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/1504/references
- http://www.zerodayinitiative.com/advisories/ZDI-08-023
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-02
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
- http://marc.info/?l=bugtraq&m=121129490723574&w=2
- http://secunia.com/advisories/30143Vendor Advisory
- http://www.kb.cert.org/vuls/id/543907US Government Resource
- http://www.securityfocus.com/archive/1/492020/100/0/threaded
FAQ
What is CVE-2008-1091?
CVE-2008-1091 is a vulnerability with a CVSS score of 9.3 (HIGH). Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format...
How severe is CVE-2008-1091?
CVE-2008-1091 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-1091?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Office, Microsoft Office Compatibility Pack For Word Excel Ppt 2007, Microsoft Word Viewer.