NVD

Id
3884  
Name
CVE-2008-4024  
Description
Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-10  
Modified Date
2011-03-07  
Seq
2008-4024  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24514 3884 CVE-2008-4024 oval:org.mitre.oval:def:5934  View
24515 3884 CVE-2008-4024 http://www.coresecurity.com/content/word-arbitrary-free  View
24516 3884 CVE-2008-4024 http://www.coresecurity.com/files/attachments/CORE-2008-0228-Word.pdf  View
24517 3884 CVE-2008-4024 MS08-072  View
24518 3884 CVE-2008-4024 20081210 CORE-2008-0228: Microsoft Word Malformed FIB Arbitrary Free Vulnerability  View
24519 3884 CVE-2008-4024 1021370  View
24520 3884 CVE-2008-4024 TA08-344A  View
24521 3884 CVE-2008-4024 ADV-2008-3384  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46872 JVNDB-2008-002182 Microsoft Office Word における Word ドキュメントの処理に関する任意のコードを実行される脆弱性 Microsoft Office Word には、Word ドキュメントの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-4024 34137 CVE-2008-4024 3884 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002182.html 2008-12-09 2009-01-16 View