CVE-2008-1091

high · 9.3

Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."

9.3

CVSS

40.5%

EPSS (exploit prob.)

99th

EPSS percentile

2008-05-13

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-94

Affected products

Vendor	Product	Affected versions
microsoft	office	2000
microsoft	office	2003
microsoft	office	2003
microsoft	office	2004
microsoft	office	2007
microsoft	office	2007_sp1
microsoft	office	2008
microsoft	office	xp
microsoft	office_compatibility_pack_for_word_excel_ppt_2007	all versions
microsoft	office_compatibility_pack_for_word_excel_ppt_2007	all versions
microsoft	word_viewer	2003
microsoft	word_viewer	2003

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-1091