NVD

Id
4650  
Name
CVE-2008-4841  
Description
The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: As of 20081210, it is unclear whether this vulnerability is related to a WordPad issue disclosed on 20080925 with a 2008-crash.doc.rar example, but there are insufficient details to be sure.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-10  
Modified Date
2011-03-07  
Seq
2008-4841  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
29151 4650 CVE-2008-4841 http://milw0rm.com/sploits/2008-crash.doc.rar  View
29152 4650 CVE-2008-4841 oval:org.mitre.oval:def:6050  View
29153 4650 CVE-2008-4841 4711  View
29154 4650 CVE-2008-4841 1021376  View
29155 4650 CVE-2008-4841 http://www.microsoft.com/technet/security/advisory/960906.mspx  View
29156 4650 CVE-2008-4841 MS09-010  View
29157 4650 CVE-2008-4841 6560  View
29158 4650 CVE-2008-4841 31399  View
29159 4650 CVE-2008-4841 32718  View
29160 4650 CVE-2008-4841 TA09-104A  View
29161 4650 CVE-2008-4841 ADV-2008-3390  View
29162 4650 CVE-2008-4841 ADV-2009-1024  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46892 JVNDB-2008-002202 Microsoft ワードパッドのテキストコンバータに任意のコードが実行可能な脆弱性 Word 97 ファイル形式用のワードパッドテキストコンバータの処理に問題があり、任意のコードを実行される脆弱性が存在します。 CVE-2008-4841 34954 CVE-2008-4841 4650 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002202.html 2008-12-09 2009-05-28 View