NVD

Id
3887  
Name
CVE-2008-4027  
Description
Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted (1) RTF file or (2) rich text e-mail message with multiple consecutive Drawing Object ("do") tags, which triggers a "memory calculation error" and memory corruption, aka "Word RTF Object Parsing Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-10  
Modified Date
2011-03-07  
Seq
2008-4027  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24533 3887 CVE-2008-4027 oval:org.mitre.oval:def:6098  View
24534 3887 CVE-2008-4027 MS08-072  View
24535 3887 CVE-2008-4027 20081209 ZDI-08-084: Microsoft Office RTF Consecutive Drawing Object Parsing Heap Corruption Vulnerability  View
24536 3887 CVE-2008-4027 1021370  View
24537 3887 CVE-2008-4027 TA08-344A  View
24538 3887 CVE-2008-4027 ADV-2008-3384  View
24539 3887 CVE-2008-4027 http://www.zerodayinitiative.com/advisories/ZDI-08-084  View
24540 3887 CVE-2008-4027 http://www.zerodayinitiative.com/advisories/ZDI-08-084/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46874 JVNDB-2008-002184 Microsoft Office Word におけるメモリ二重解放の脆弱性 Microsoft Office Word には、RTF ファイルまたはリッチテキスト電子メールメッセージの処理に不備があるため、メモリ二重解放の脆弱性が存在します。 CVE-2008-4027 34140 CVE-2008-4027 3887 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002184.html 2008-12-09 2009-01-16 View