CVE

Id
31208  
CVE No.
CVE-2008-1091  
Status
Candidate  
Description
Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."  
Phase
Assigned (20080228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
332803 31208 CVE-2008-1091 BUGTRAQ:20080513 ZDI-08-023: Microsoft Office RTF Parsing Engine Memory Corruption Vulnerability  View
332804 31208 CVE-2008-1091 URL:http://www.securityfocus.com/archive/1/archive/1/492020/100/0/threaded  View
332805 31208 CVE-2008-1091 MISC:http://www.zerodayinitiative.com/advisories/ZDI-08-023  View
332806 31208 CVE-2008-1091 HP:HPSBST02336  View
332807 31208 CVE-2008-1091 URL:http://marc.info/?l=bugtraq&m=121129490723574&w=2  View
332808 31208 CVE-2008-1091 HP:SSRT080071  View
332809 31208 CVE-2008-1091 URL:http://marc.info/?l=bugtraq&m=121129490723574&w=2  View
332810 31208 CVE-2008-1091 MS:MS08-026  View
332811 31208 CVE-2008-1091 URL:http://www.microsoft.com/technet/security/bulletin/ms08-026.mspx  View
332812 31208 CVE-2008-1091 CERT:TA08-134A  View
332813 31208 CVE-2008-1091 URL:http://www.us-cert.gov/cas/techalerts/TA08-134A.html  View
332814 31208 CVE-2008-1091 CERT-VN:VU#543907  View
332815 31208 CVE-2008-1091 URL:http://www.kb.cert.org/vuls/id/543907  View
332816 31208 CVE-2008-1091 BID:29104  View
332817 31208 CVE-2008-1091 URL:http://www.securityfocus.com/bid/29104  View
332818 31208 CVE-2008-1091 OVAL:oval:org.mitre.oval:def:5494  View
332819 31208 CVE-2008-1091 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5494  View
332820 31208 CVE-2008-1091 VUPEN:ADV-2008-1504  View
332821 31208 CVE-2008-1091 URL:http://www.vupen.com/english/advisories/2008/1504/references  View
332822 31208 CVE-2008-1091 SECTRACK:1020013  View
332823 31208 CVE-2008-1091 URL:http://www.securitytracker.com/id?1020013  View
332824 31208 CVE-2008-1091 SECUNIA:30143  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45828 JVNDB-2008-001138 Sun Solaris の IP 実装に関連するファイアウォール回避、およびサービス運用妨害 (DoS) の脆弱性 Sun Solaris の Internet Protocol (IP) 実装には、ICMP パケットおよび再構成された IP フラグメントの処理に不備があるために、ファイアウォールポリシーを回避される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-1095 31208 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001138.html  View