9.3

CVE-2008-0109

EPSS 55.78%
Veröffentlicht 12.02.2008 23:00:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Office Version2000 Updatesp3

Microsoft ≫ Office Version2003

Microsoft ≫ Office Version2003 Updatesp2

Microsoft ≫ Office Versionxp Updatesp3

Microsoft ≫ Word

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	55.78%	0.98

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://marc.info/?l=bugtraq&m=120361015026386&w=2

http://www.us-cert.gov/cas/techalerts/TA08-043C.html

US Government Resource

http://secunia.com/advisories/28901

Vendor Advisory

http://www.kb.cert.org/vuls/id/692417

US Government Resource

http://www.securityfocus.com/archive/1/488071/100/0/threaded

http://www.securityfocus.com/bid/27656

http://www.securitytracker.com/id?1019374

http://www.vupen.com/english/advisories/2008/0511/references

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-009

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5073

https://nvd.nist.gov/vuln/detail/CVE-2008-0109

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-0109

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-0109

EUVD