NVD

Id
3885  
Name
CVE-2008-4025  
Description
Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via (1) an RTF file or (2) a rich text e-mail message containing an invalid number of points for a polyline or polygon, which triggers a heap-based buffer overflow, aka "Word RTF Object Parsing Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-10  
Modified Date
2011-03-07  
Seq
2008-4025  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24522 3885 CVE-2008-4025 oval:org.mitre.oval:def:5682  View
24523 3885 CVE-2008-4025 MS08-072  View
24524 3885 CVE-2008-4025 20081209 Secunia Research: Microsoft Word RTF Polyline/Polygon Integer Overflow  View
24525 3885 CVE-2008-4025 1021370  View
24526 3885 CVE-2008-4025 TA08-344A  View
24527 3885 CVE-2008-4025 ADV-2008-3384  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46873 JVNDB-2008-002183 Microsoft Office Word における整数オーバーフローの脆弱性 Microsoft Office Word には、RTF ファイルまたはリッチテキスト電子メールメッセージの処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2008-4025 34138 CVE-2008-4025 3885 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002183.html 2008-12-09 2009-01-16 View