CVE

Id
31551  
CVE No.
CVE-2008-1434  
Status
Candidate  
Description
Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a "memory handling error" that triggers memory corruption.  
Phase
Assigned (20080321)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
338562 31551 CVE-2008-1434 IDEFENSE:20080513 Microsoft Word CSS Processing Memory Corruption Vulnerability  View
338563 31551 CVE-2008-1434 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=700  View
338564 31551 CVE-2008-1434 HP:HPSBST02336  View
338565 31551 CVE-2008-1434 URL:http://marc.info/?l=bugtraq&m=121129490723574&w=2  View
338566 31551 CVE-2008-1434 HP:SSRT080071  View
338567 31551 CVE-2008-1434 URL:http://marc.info/?l=bugtraq&m=121129490723574&w=2  View
338568 31551 CVE-2008-1434 MS:MS08-026  View
338569 31551 CVE-2008-1434 URL:http://www.microsoft.com/technet/security/bulletin/ms08-026.mspx  View
338570 31551 CVE-2008-1434 CERT:TA08-134A  View
338571 31551 CVE-2008-1434 URL:http://www.us-cert.gov/cas/techalerts/TA08-134A.html  View
338572 31551 CVE-2008-1434 BID:29105  View
338573 31551 CVE-2008-1434 URL:http://www.securityfocus.com/bid/29105  View
338574 31551 CVE-2008-1434 OVAL:oval:org.mitre.oval:def:5012  View
338575 31551 CVE-2008-1434 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5012  View
338576 31551 CVE-2008-1434 VUPEN:ADV-2008-1504  View
338577 31551 CVE-2008-1434 URL:http://www.vupen.com/english/advisories/2008/1504/references  View
338578 31551 CVE-2008-1434 SECTRACK:1020014  View
338579 31551 CVE-2008-1434 URL:http://www.securitytracker.com/id?1020014  View
338580 31551 CVE-2008-1434 SECUNIA:30143  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46048 JVNDB-2008-001358 Microsoft Malware Protection Engine の一時ファイル作成に関するサービス運用妨害 (DoS) の脆弱性 Microsoft Malware Protection Engine (mpengine.dll) には、不正なデータ構造体のファイルにより、膨大な一時ファイルを作成することで、システムのディスク領域を枯渇してしまう、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-1438 31551 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001358.html  View