CVE-2008-1092 Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOT...
HighCVSS 9.3
EPSS 25.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft word | = 2000-sp3 | No fix listed |
| Microsoft word | = 2002-sp3 | No fix listed |
| Microsoft word | = 2003-sp2 | No fix listed |
| Microsoft word | = 2003_sp3 | No fix listed |
| Microsoft word | = 2007 | No fix listed |
| Microsoft word | = 2007_sp1 | No fix listed |
References
- SSRT080071 vendor-advisory
- VU#936529 third-party-advisory us-government-resource
- 950627 vendor-advisory
- 1019686 vdb-entry
- MS08-028 vendor-advisory
- microsoft-jet-msjet40-bo(41380) vdb-entry