PT-2008-5342 · Microsoft · Office Word+4

Publicado 2008-12-10 · Atualizado 2018-10-30 · CVE-2008-4027

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Word versions 2000 SP3 through 2007 SP1 Microsoft Office Outlook version 2007 Gold and SP1 Microsoft Office Word Viewer version 2003 Gold and SP3 Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats versions Gold and SP1 Microsoft Office version 2004 for Mac

Description A remote code execution issue exists in the way Microsoft Office handles specially crafted Rich Text Format (RTF) files. This could allow remote code execution if a user opens a specially crafted RTF file with malformed control words in Word, or views or previews a specially crafted RTF file with malformed control words in rich text e-mail. An attacker who successfully exploits this issue could take control of an affected system in the context of the currently logged-on user, potentially installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights. The issue is triggered by multiple consecutive Drawing Object (do) tags in an RTF file or rich text e-mail message, leading to a memory calculation error and memory corruption.

Recommendations For Microsoft Office Word versions 2000 SP3 through 2007 SP1, update to a version that is not affected by this issue. For Microsoft Office Outlook version 2007 Gold and SP1, update to a version that is not affected by this issue. For Microsoft Office Word Viewer version 2003 Gold and SP3, update to a version that is not affected by this issue. For Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats versions Gold and SP1, update to a version that is not affected by this issue. For Microsoft Office version 2004 for Mac, update to a version that is not affected by this issue.

Correção

RCE

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-4027

Produtos afetados

Office

Office Compatibility Pack For Word

Outlook

Office Word

Office Word Viewer

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2008-4027 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-08-084 · Nota
• http://securityfocus.com/archive/1/499062/100/0/threaded · Nota
• http://securitytracker.com/id?1021370 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4027 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6098 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-072 · Nota
• http://vupen.com/english/advisories/2008/3384 · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA08-344A.html · Nota