9.3

CVE-2008-0109

EPSS 55.78%
Published 12.02.2008 23:00:00
Last modified 09.04.2025 00:30:58
Source secure@microsoft.com
Teams watchlist Login
Open Login

Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.

Affected products Warnungen 0 Metrics 2 CWE 0 References 13

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Office Version2000 Updatesp3

Microsoft ≫ Office Version2003

Microsoft ≫ Office Version2003 Updatesp2

Microsoft ≫ Office Versionxp Updatesp3

Microsoft ≫ Word

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	55.78%	0.98

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://marc.info/?l=bugtraq&m=120361015026386&w=2

http://www.us-cert.gov/cas/techalerts/TA08-043C.html

US Government Resource

http://secunia.com/advisories/28901

Vendor Advisory

http://www.kb.cert.org/vuls/id/692417

US Government Resource

http://www.securityfocus.com/archive/1/488071/100/0/threaded

http://www.securityfocus.com/bid/27656

http://www.securitytracker.com/id?1019374

http://www.vupen.com/english/advisories/2008/0511/references

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-009

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5073

https://nvd.nist.gov/vuln/detail/CVE-2008-0109

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-0109

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-0109

EUVD