CVE-2008-1091

Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."

Link	Resource
http://www.kb.cert.org/vuls/id/543907	US Government Resource
http://www.zerodayinitiative.com/advisories/ZDI-08-023
http://www.us-cert.gov/cas/techalerts/TA08-134A.html	US Government Resource
http://www.securityfocus.com/bid/29104
http://www.securitytracker.com/id?1020013
http://secunia.com/advisories/30143	Vendor Advisory
http://marc.info/?l=bugtraq&m=121129490723574&w=2
http://www.vupen.com/english/advisories/2008/1504/references
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5494
http://www.securityfocus.com/archive/1/492020/100/0/threaded
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-026

Configuration 1

cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:* cpe:2.3:a:microsoft:office:2007_sp1:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:* cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:* cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:sp1:*:*:*:*:* cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:* cpe:2.3:a:microsoft:word_viewer:2003:*:sp3:*:*:*:*:* cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:* cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*

---

Published : 2008-05-13 10:20

Updated : 2018-10-12 09:45

---

NVD link : CVE-2008-1091

Mitre link : CVE-2008-1091

No products.

CWE-94