9.3

CVE-2008-0109

EPSS 58.05%
Veröffentlicht 12.02.2008 23:00:00
Zuletzt bearbeitet 23.04.2026 00:35:47
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

NVD 5 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Office Version2000 Updatesp3

Microsoft ≫ Office Version2003

Microsoft ≫ Office Version2003 Updatesp2

Microsoft ≫ Office Versionxp Updatesp3

Microsoft ≫ Word

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	58.05%	0.981

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://marc.info/?l=bugtraq&m=120361015026386&w=2

http://www.us-cert.gov/cas/techalerts/TA08-043C.html

US Government Resource

http://secunia.com/advisories/28901

Vendor Advisory

http://www.kb.cert.org/vuls/id/692417

US Government Resource

http://www.securityfocus.com/archive/1/488071/100/0/threaded

http://www.securityfocus.com/bid/27656

http://www.securitytracker.com/id?1019374

http://www.vupen.com/english/advisories/2008/0511/references

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-009

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5073

https://nvd.nist.gov/vuln/detail/CVE-2008-0109

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-0109

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-0109

EUVD