CVE-2008-2752: High severity microsoft office word vulnerability

Published Jun 18, 2008

Updated

Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are obtained from third party information.

Affected Software

9 affected components

Microsoft Word=2000

Microsoft Word=2000-sp2

Microsoft Word=2000-sp3

Microsoft Word=2000-sr1

Microsoft Word=2000-sr1a

Microsoft Word=2003

Microsoft Word=2003-sp1

Microsoft Word=2003-sp2

Microsoft Word=2003-sp3

Event History

Jun 18, 2008

CVE Published

via MITRE·07:29 PM

Data Sourced

via MITRE·07:29 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2752?

CVE-2008-2752 is critical due to its potential to cause application crashes and allow remote code execution.

How do I fix CVE-2008-2752?

To mitigate CVE-2008-2752, users should apply any available patches or updates for Microsoft Word 2000 and 2003.

What versions of Microsoft Word are affected by CVE-2008-2752?

CVE-2008-2752 affects Microsoft Word 2000 (multiple service packs) and Microsoft Word 2003 (multiple service packs).

What kind of attack does CVE-2008-2752 allow?

CVE-2008-2752 allows user-assisted remote attackers to exploit memory corruption to execute arbitrary code.

Is there a workaround for CVE-2008-2752?

As a temporary measure against CVE-2008-2752, users should avoid opening untrusted .doc files.