vulnwire
9.3crit

CVE-2008-0109in critical feed

Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code v…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
30.9%
percentile 98%
Public exploits
0
none known

Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.

Exploit prediction (EPSS)

30.87% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness

References

  • docs.microsoft.com /en-us/security-updates/securitybulletins/2008/ms08-009 · vendor-advisory, x_refsource_MS, x_transferred
  • securityfocus.com /bid/27656 · vdb-entry, x_refsource_BID, x_transferred
  • vupen.com /english/advisories/2008/0511/references · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/28901 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • marc.info /?l=bugtraq&m=120361015026386&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • kb.cert.org /vuls/id/692417 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • securityfocus.com /archive/1/488071/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • us-cert.gov /cas/techalerts/TA08-043C.html · third-party-advisory, x_refsource_CERT, x_transferred
  • securitytracker.com /id?1019374 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5073 · vdb-entry, signature, x_refsource_OVAL, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.