PT-2008-5343 · Microsoft · Office Word+5

Wushi · Published 2008-12-10 · Updated 2018-10-30 · CVE-2008-4028

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Word versions 2000 SP3 through 2007 SP1 Microsoft Outlook version 2007 Gold and SP1 Microsoft Word Viewer version 2003 Gold and SP3 Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats versions Gold and SP1 Microsoft Office versions 2004 and 2008 for Mac Microsoft Open XML File Format Converter for Mac (affected versions not specified)

Description A remote code execution issue exists in the way Microsoft Office handles specially crafted Rich Text Format (RTF) files. This could allow remote code execution if a user opens a specially crafted RTF file in Word, or reads or previews a specially crafted e-mail sent in the RTF format. An attacker who successfully exploits this issue could take control of an affected system in the context of the currently logged-in user, potentially installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

Recommendations For Microsoft Office Word versions 2000 SP3 through 2007 SP1, update to a newer version that includes the fix for this issue. For Microsoft Outlook version 2007 Gold and SP1, update to a newer version that includes the fix for this issue. For Microsoft Word Viewer version 2003 Gold and SP3, update to a newer version that includes the fix for this issue. For Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats versions Gold and SP1, update to a newer version that includes the fix for this issue. For Microsoft Office versions 2004 and 2008 for Mac, update to a newer version that includes the fix for this issue. For Microsoft Open XML File Format Converter for Mac, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-4028

Affected Products

Office

Office Compatibility Pack For Word

Office Word

Open Xml File Format Converter For Mac

Outlook

Word Viewer

References · 10

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4028 · Security Note
• http://vupen.com/english/advisories/2008/3384 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4028 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 · Vendor Advisory
• http://securitytracker.com/id?1021370 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6096 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-072 · Note
• http://zerodayinitiative.com/advisories/ZDI-08-085 · Note
• http://securityfocus.com/archive/1/499063/100/0/threaded · Note
• http://us-cert.gov/cas/techalerts/TA08-344A.html · Note