First published: Sun Sep 13 2009(Updated: )
Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Office | =2008 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2008-7217 is considered moderate, as it allows local users to bypass security restrictions.
To fix CVE-2008-7217, ensure that administrative restrictions are properly enforced and consider applying available updates from Microsoft.
CVE-2008-7217 affects Microsoft Office 2008 for Mac running on Macintosh systems with restricted access.
Yes, CVE-2008-7217 can be exploited by local users with user ID 502 to access restricted Office programs.
Yes, patches and updates to address CVE-2008-7217 are available from Microsoft.