PT-2008-3739 · Microsoft · Office Word

Publicado 2008-07-09 · Atualizado 2017-09-29 · CVE-2008-2244

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Office Word 2002 SP3

Description: A remote code execution issue exists in the way Microsoft Word handles specially crafted Word files, which could allow an attacker to take complete control of an affected system if a user opens a maliciously crafted file. This issue has been exploited in the wild. An attacker could then install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations: For Microsoft Office Word 2002 SP3, avoid opening specially crafted Word files until a fix is available. As a temporary workaround, consider restricting the use of Microsoft Word to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-2244

Produtos afetados

Office Word

Referências · 14

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5897 · Nota
• http://securitytracker.com/id?1020447 · Nota
• http://secunia.com/advisories/30975 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=121915960406986&w=2 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2028 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-042 · Nota
• http://microsoft.com/technet/security/advisory/953635.mspx · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2244 · Nota de Segurança
• http://securityfocus.com/bid/30124 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43663 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2244 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA08-225A.html · Nota
• http://isc.sans.org/diary.html?storyid=4696 · Nota
• http://blogs.technet.com/msrc/archive/2008/07/08/vulnerability-in-microsoft-word-could-allow-remote-code-execution.aspx · Nota