PT-2008-5340 · Microsoft · Office Word+5

Dyon Balding · Published 2008-12-10 · Updated 2018-10-30 · CVE-2008-4025

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Word versions 2000 SP3 through 2007 SP1 Microsoft Office Outlook version 2007 Gold and SP1 Microsoft Office Word Viewer version 2003 Gold and SP3 Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats versions Gold and SP1 Microsoft Office for Mac versions 2004 and 2008 Microsoft Open XML File Format Converter for Mac (affected versions not specified)

Description The issue is related to an integer overflow in Microsoft Office when handling Rich Text Format (RTF) files, which can trigger a heap-based buffer overflow. This allows remote attackers to execute arbitrary code via an RTF file or a rich text e-mail message containing an invalid number of points for a polyline or polygon. If a user opens a specially crafted RTF file in Word or reads a specially crafted e-mail sent in the RTF format, an attacker could take control of an affected system in the context of the currently logged-on user, potentially installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

Recommendations For Microsoft Office Word versions 2000 SP3 through 2007 SP1, update to a version that is not affected by this issue. For Microsoft Office Outlook version 2007 Gold and SP1, avoid reading specially crafted e-mail sent in the RTF format until a patch is available. For Microsoft Office Word Viewer version 2003 Gold and SP3, consider disabling the ability to open RTF files until a fix is provided. For Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats versions Gold and SP1, restrict the use of RTF files until an update is available. For Microsoft Office for Mac versions 2004 and 2008, and Microsoft Open XML File Format Converter for Mac, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-4025

Affected Products

Office Compatibility Pack For Word

Outlook

Office Word

Office Word Viewer

Office For Mac

Open Xml File Format Converter For Mac

References · 10

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4025 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-4025 · Security Note
• http://secunia.com/secunia_research/2008-21 · Vendor Advisory
• http://vupen.com/english/advisories/2008/3384 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 · Vendor Advisory
• http://securitytracker.com/id?1021370 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-072 · Note
• http://securityfocus.com/archive/1/499054/100/0/threaded · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5682 · Note
• http://us-cert.gov/cas/techalerts/TA08-344A.html · Note