CVE-2008-4025

CWE-119 — Buffer Overflow3 documents3 sources
Severity
9.3CRITICAL
EPSS
65.7%
top 1.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Microsoft OfficeMicrosoft Office OutlookMicrosoft Office Word+2 more
Timeline
PublishedDec 10
Latest updateMay 2

Description

Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via (1) an RTF file or (2) a rich text e-mail message containing an invalid number of points for a polyline or polygon, which triggers …

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages5 packages

▶NVDmicrosoft/office_word4 versions+3
▶NVDmicrosoft/office2004, 2008+1

🔴Vulnerability Details

2
GHSA
GHSA-wvr7-39mh-vvr4: Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP↗2022-05-02
▶
CVEList
CVE-2008-4025: Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP↗2008-12-10
▶
CVE-2008-4025 (CRITICAL CVSS 9.3) | Integer overflow in Microsoft Offic | cvebase.io