CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-4024

Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory Corruption Vulnerability."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.575

EPSS Ranking 98.0%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2008-4024

Microsoft » Office » Version: 2000

cpe:2.3:a:microsoft:office:2000
Microsoft » Office » Version: 2003

cpe:2.3:a:microsoft:office:2003
Microsoft » Office » Version: 2004

cpe:2.3:a:microsoft:office:2004
Microsoft » Office » Version: 2008

cpe:2.3:a:microsoft:office:2008
Microsoft » Office » Version: xp

cpe:2.3:a:microsoft:office:xp
Microsoft » Office Compatibility Pack For Word Excel Ppt 2007 » Version: Any

cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*
Microsoft » Office Outlook » Version: 2007

cpe:2.3:a:microsoft:office_outlook:2007
Microsoft » Office Word » Version: 2000

cpe:2.3:a:microsoft:office_word:2000
Microsoft » Office Word » Version: 2002

cpe:2.3:a:microsoft:office_word:2002
Microsoft » Office Word » Version: 2003

cpe:2.3:a:microsoft:office_word:2003
Microsoft » Office Word » Version: 2007

cpe:2.3:a:microsoft:office_word:2007
Microsoft » Office Word Viewer » Version: 2003

cpe:2.3:a:microsoft:office_word_viewer:2003
Microsoft » Open Xml File Format Converter » Version: N/A

cpe:2.3:a:microsoft:open_xml_file_format_converter:-
Microsoft » Works » Version: 8.0

cpe:2.3:a:microsoft:works:8.0
Microsoft » Office System » Version: Any

cpe:2.3:o:microsoft:office_system:*
Microsoft » Office System » Version: sp1

cpe:2.3:o:microsoft:office_system:sp1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-4024

Products

Pricing

Contact Us