CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1434

Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a "memory handling error" that triggers memory corruption.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.605

EPSS Ranking 98.2%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2008-1434

Microsoft » Office » Version: 2000

cpe:2.3:a:microsoft:office:2000
Microsoft » Office » Version: 2003

cpe:2.3:a:microsoft:office:2003
Microsoft » Office » Version: 2004

cpe:2.3:a:microsoft:office:2004
Microsoft » Office » Version: 2007

cpe:2.3:a:microsoft:office:2007
Microsoft » Office » Version: 2007_sp1

cpe:2.3:a:microsoft:office:2007_sp1
Microsoft » Office » Version: 2008

cpe:2.3:a:microsoft:office:2008
Microsoft » Office » Version: xp

cpe:2.3:a:microsoft:office:xp
Microsoft » Office Compatibility Pack For Word Excel Ppt 2007 » Version: Any

cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*
Microsoft » Word Viewer » Version: 2003

cpe:2.3:a:microsoft:word_viewer:2003

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1434

Products

Pricing

Contact Us