PT-2008-5341 · Microsoft · Office Word+4
Publicado
2008-12-10
·
Atualizado
2018-10-30
·
CVE-2008-4026
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Office Word versions 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1
Word Viewer 2003 Gold and SP3
Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1
Office 2004 and 2008 for Mac
Open XML File Format Converter for Mac
Description
A remote code execution issue exists due to the way Word handles specially crafted Word files. This could allow remote code execution if a user opens a specially crafted Word file with a malformed value. The impact may be less severe for users with limited system privileges compared to those with administrative rights.
Recommendations
For Microsoft Office Word 2000 SP3, update to a version that is not affected by this issue.
For Microsoft Office Word 2002 SP3, update to a version that is not affected by this issue.
For Microsoft Office Word 2003 SP3, update to a version that is not affected by this issue.
For Microsoft Office Word 2007 Gold and SP1, update to a version that is not affected by this issue.
For Word Viewer 2003 Gold and SP3, update to a version that is not affected by this issue.
For Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1, update to a version that is not affected by this issue.
For Office 2004 and 2008 for Mac, update to a version that is not affected by this issue.
For Open XML File Format Converter for Mac, update to a version that is not affected by this issue.
As a temporary workaround, consider avoiding the use of malformed Word files until a patch is available.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Office Word
Office
Office Compatibility Pack For Word
Open Xml File Format Converter For Mac
Word Viewer