CVE-2008-1092: Buffer Overflow

Published Mar 25, 2008

Updated

Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.

Affected Software

9 affected components

Microsoft Windows 2000

Microsoft Windows 2003 Server=sp1

Microsoft Windows XP

Microsoft Word=2000-sp3

Microsoft Word=2002-sp3

Microsoft Word=2003-sp2

Microsoft Word=2003_sp3

Microsoft Word=2007

Microsoft Word=2007_sp1

Event History

Mar 25, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Data Sourced

04:44 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-1092?

CVE-2008-1092 has a high severity rating due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2008-1092?

To fix CVE-2008-1092, apply the latest updates and patches provided by Microsoft for the affected software.

Which products are affected by CVE-2008-1092?

CVE-2008-1092 affects multiple versions of Microsoft Word and the Microsoft Jet Database Engine.

Can CVE-2008-1092 be exploited through email attachments?

Yes, CVE-2008-1092 can be exploited via crafted Word files sent as email attachments.

Is CVE-2008-1092 still a threat today?

CVE-2008-1092 may no longer be a significant current threat due to patch availability, but unpatched systems remain vulnerable.