CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1091

Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.624

EPSS Ranking 98.2%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2008-1091

Microsoft » Office » Version: 2000

cpe:2.3:a:microsoft:office:2000
Microsoft » Office » Version: 2003

cpe:2.3:a:microsoft:office:2003
Microsoft » Office » Version: 2004

cpe:2.3:a:microsoft:office:2004
Microsoft » Office » Version: 2007

cpe:2.3:a:microsoft:office:2007
Microsoft » Office » Version: 2007_sp1

cpe:2.3:a:microsoft:office:2007_sp1
Microsoft » Office » Version: 2008

cpe:2.3:a:microsoft:office:2008
Microsoft » Office » Version: xp

cpe:2.3:a:microsoft:office:xp
Microsoft » Office Compatibility Pack For Word Excel Ppt 2007 » Version: Any

cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*
Microsoft » Word Viewer » Version: 2003

cpe:2.3:a:microsoft:word_viewer:2003

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1091

Products

Pricing

Contact Us