CVE-2008-0109
First published: Tue Feb 12 2008(Updated: )
Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office | =xp-sp3 | |
| Microsoft Office Word | ||
| Microsoft Office | =2003-sp2 | |
| Microsoft Office | =2003 | |
| Microsoft Office | =2000-sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.us-cert.gov/cas/techalerts/TA08-043C.html
- http://www.kb.cert.org/vuls/id/692417
- http://www.securityfocus.com/bid/27656
- http://www.securitytracker.com/id?1019374
- http://secunia.com/advisories/28901
- http://marc.info/?l=bugtraq&m=120361015026386&w=2
- http://www.vupen.com/english/advisories/2008/0511/references
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5073
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-009
- http://www.securityfocus.com/archive/1/488071/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2008-0109?
CVE-2008-0109 has a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2008-0109?
To mitigate CVE-2008-0109, ensure that you apply the latest security patches and updates provided by Microsoft for affected Office versions.
Which Microsoft Office versions are affected by CVE-2008-0109?
CVE-2008-0109 affects Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Word Viewer 2003.
What type of attack does CVE-2008-0109 facilitate?
CVE-2008-0109 allows attackers to execute arbitrary code through crafted fields within the File Information Block in Word files.
What can happen if CVE-2008-0109 is exploited?
Exploitation of CVE-2008-0109 can lead to memory corruption, which may give the attacker the ability to execute malicious code on the victim's system.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft office
- version/microsoft office/xp-sp3
- canonical/microsoft office word
- version/microsoft office/2003-sp2
- version/microsoft office/2003
- version/microsoft office/2000-sp3