PT-2008-5342 · Microsoft · Office Word+4

Published 2008-12-10 · Updated 2018-10-30 · CVE-2008-4027

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Word versions 2000 SP3 through 2007 SP1 Microsoft Office Outlook version 2007 Gold and SP1 Microsoft Office Word Viewer version 2003 Gold and SP3 Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats versions Gold and SP1 Microsoft Office version 2004 for Mac

Description A remote code execution issue exists in the way Microsoft Office handles specially crafted Rich Text Format (RTF) files. This could allow remote code execution if a user opens a specially crafted RTF file with malformed control words in Word, or views or previews a specially crafted RTF file with malformed control words in rich text e-mail. An attacker who successfully exploits this issue could take control of an affected system in the context of the currently logged-on user, potentially installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights. The issue is triggered by multiple consecutive Drawing Object (do) tags in an RTF file or rich text e-mail message, leading to a memory calculation error and memory corruption.

Recommendations For Microsoft Office Word versions 2000 SP3 through 2007 SP1, update to a version that is not affected by this issue. For Microsoft Office Outlook version 2007 Gold and SP1, update to a version that is not affected by this issue. For Microsoft Office Word Viewer version 2003 Gold and SP3, update to a version that is not affected by this issue. For Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats versions Gold and SP1, update to a version that is not affected by this issue. For Microsoft Office version 2004 for Mac, update to a version that is not affected by this issue.

Fix

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-4027

Affected Products

Office

Office Compatibility Pack For Word

Outlook

Office Word

Office Word Viewer

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2008-4027 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4027 · Security Note
• http://vupen.com/english/advisories/2008/3384 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 · Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-08-084 · Note
• http://securityfocus.com/archive/1/499062/100/0/threaded · Note
• http://securitytracker.com/id?1021370 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6098 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-072 · Note
• http://us-cert.gov/cas/techalerts/TA08-344A.html · Note