PT-2008-2689 · Microsoft · Office Word+2

Published 2008-05-13 · Updated 2018-10-12 · CVE-2008-1091

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word in Office versions 2000 through 2007 Office System SP1

Description A remote code execution issue exists in the way Microsoft Office handles specially crafted Rich Text Format (.rtf) files. This could allow remote code execution if a user opens a specially crafted .rtf file with malformed strings in Word or previews a specially crafted .rtf file with malformed strings in rich text e-mail. An attacker who successfully exploits this issue could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Word in Office versions 2000 through 2007 Office System SP1, update to a version later than 2007 Office System SP1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-1091

Affected Products

Office

Office Word

Outlook

References · 14

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1091 · Security Note
• http://secunia.com/advisories/30143 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=121129490723574&w=2 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1091 · Security Note
• http://securityfocus.com/bid/29104 · Note
• http://securitytracker.com/id?1020013 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-026 · Note
• http://zerodayinitiative.com/advisories/ZDI-08-023 · Note
• http://us-cert.gov/cas/techalerts/TA08-134A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5494 · Note
• http://kb.cert.org/vuls/id/543907 · Note
• http://vupen.com/english/advisories/2008/1504/references · Note
• http://securityfocus.com/archive/1/492020/100/0/threaded · Note