CVE-2008-4030

high · 9.3

Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1 allow remote attackers to execute arbitrary code via crafted control words in (1) an RTF file or (2) a rich text e-mail message, which triggers incorrect memory allocation and memory corruption, aka "Word RTF Object Parsing Vulnerability," a different vulnerability than CVE-2008-4028.

9.3

CVSS

23.4%

EPSS (exploit prob.)

98th

EPSS percentile

2008-12-10

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-399

Affected products

Vendor	Product	Affected versions
microsoft	office	2004
microsoft	office	2008
microsoft	office_compatibility_pack_for_word_excel_ppt_2007	all versions
microsoft	office_compatibility_pack_for_word_excel_ppt_2007	all versions
microsoft	office_word_viewer	2003
microsoft	office_word_viewer	2003
microsoft	open_xml_file_format_converter	all versions
microsoft	works	8.0
microsoft	office_outlook	2007
microsoft	office_outlook	2007
microsoft	office_word	2000
microsoft	office_word	2002
microsoft	office_word	2003
microsoft	office_word	2007
microsoft	office	2000
microsoft	office	2003
microsoft	office	xp
microsoft	office_system	all versions
microsoft	office_system	sp1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-4030