CVE-2008-0109 Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of....
HighCVSS 9.3
EPSS 30.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2000-sp3 | No fix listed |
| Microsoft office | = 2003 | No fix listed |
| Microsoft office | = 2003-sp2 | No fix listed |
| Microsoft office | = xp-sp3 | No fix listed |
| Microsoft word | All versions | No fix listed |
References
- HPSBST02314 vendor-advisory
- 28901 third-party-advisory vendor-advisory
- VU#692417 third-party-advisory us-government-resource
- 20080213 [Reversemode Advisory] February Advisories : Microsoft Word 2003 + Fortinet Forticlient mailing-list
- 27656 vdb-entry
- 1019374 vdb-entry
- TA08-043C third-party-advisory us-government-resource
- ADV-2008-0511 vdb-entry vendor-advisory
- MS08-009 vendor-advisory
- oval:org.mitre.oval:def:5073 signature vdb-entry