PT-2009-2684 · Microsoft · Office 2008 For Mac

Published 2009-09-13 · Updated 2009-09-14 · CVE-2008-7217

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Office 2008 for Mac

Description The issue concerns a security restriction bypass in Microsoft Office 2008 for Mac. When running on Macintosh systems where access to Office is restricted to administrators, the software fails to enforce this restriction for a specific user ID, 502. This allows local users with that ID to bypass the intended security policy and access Office programs. The problem is related to permissions and ownership for certain directories.

Recommendations For Microsoft Office 2008 for Mac, consider restricting access to the affected directories to enforce the intended security policy until a fix is available. As a temporary workaround, review and adjust the permissions and ownership of the directories to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-7217

Affected Products

Office 2008 For Mac

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2008-7217 · Security Note
• http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3B948488 · Vendor Advisory
• http://osvdb.org/44959 · Note