CVE-2008-4031
HP Security Bulletin 2008-01.83
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a malformed string in (1) an RTF file or (2) a rich text e-mail message, which triggers incorrect memory allocation and memory corruption, aka "Word RTF Object Parsing Vulnerability."
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, y 2007 Gold y SP1; Outlook 2007 Gold y SP1; Word Viewer 2003 Gold y SP3; Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats Gold y SP1; Office 2004 y 2008 para Mac; y Open XML File Format Converter para Mac permite a atacantes remotos ejecutar código de su elección a través de una cadena mal formada en (1) un archivo RTF o (2) una mensaje de correo electrónico con texto enriquecido, que provoca una asignación incorrecta de memoria y una corrupción de memoria, también conocido como "Vulnerabilidad de análisis sintáctico de objeto en Word RTF."
Various potential security vulnerabilities have been identified in Microsoft software that is running on the Storage Management Appliance (SMA). Some of these vulnerabilities may be pertinent to the SMA, please check the table in the Resolution section of this Security Bulletin.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-09-10 CVE Reserved
- 2008-12-10 CVE Published
- 2024-08-07 CVE Updated
- 2025-06-28 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-399: Resource Management Errors
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id?1021370 | Vdb Entry | |
| http://www.us-cert.gov/cas/techalerts/TA08-344A.html | Third Party Advisory | |
| http://www.vupen.com/english/advisories/2008/3384 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5952 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 | 2018-10-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | Office Outlook Search vendor "Microsoft" for product "Office Outlook" | 2007 Search vendor "Microsoft" for product "Office Outlook" and version "2007" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2000 Search vendor "Microsoft" for product "Office" and version "2000" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Outlook Search vendor "Microsoft" for product "Office Outlook" | 2007 Search vendor "Microsoft" for product "Office Outlook" and version "2007" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2003 Search vendor "Microsoft" for product "Office" and version "2003" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Outlook Search vendor "Microsoft" for product "Office Outlook" | 2007 Search vendor "Microsoft" for product "Office Outlook" and version "2007" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | xp Search vendor "Microsoft" for product "Office" and version "xp" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Outlook Search vendor "Microsoft" for product "Office Outlook" | 2007 Search vendor "Microsoft" for product "Office Outlook" and version "2007" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | * | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Outlook Search vendor "Microsoft" for product "Office Outlook" | 2007 Search vendor "Microsoft" for product "Office Outlook" and version "2007" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | sp1 Search vendor "Microsoft" for product "Office System" and version "sp1" | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Outlook Search vendor "Microsoft" for product "Office Outlook" | 2007 Search vendor "Microsoft" for product "Office Outlook" and version "2007" | sp1 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2000 Search vendor "Microsoft" for product "Office" and version "2000" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Outlook Search vendor "Microsoft" for product "Office Outlook" | 2007 Search vendor "Microsoft" for product "Office Outlook" and version "2007" | sp1 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2003 Search vendor "Microsoft" for product "Office" and version "2003" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Outlook Search vendor "Microsoft" for product "Office Outlook" | 2007 Search vendor "Microsoft" for product "Office Outlook" and version "2007" | sp1 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | xp Search vendor "Microsoft" for product "Office" and version "xp" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Outlook Search vendor "Microsoft" for product "Office Outlook" | 2007 Search vendor "Microsoft" for product "Office Outlook" and version "2007" | sp1 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | * | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Outlook Search vendor "Microsoft" for product "Office Outlook" | 2007 Search vendor "Microsoft" for product "Office Outlook" and version "2007" | sp1 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | sp1 Search vendor "Microsoft" for product "Office System" and version "sp1" | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2000 Search vendor "Microsoft" for product "Office Word" and version "2000" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2000 Search vendor "Microsoft" for product "Office" and version "2000" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2000 Search vendor "Microsoft" for product "Office Word" and version "2000" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2003 Search vendor "Microsoft" for product "Office" and version "2003" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2000 Search vendor "Microsoft" for product "Office Word" and version "2000" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | xp Search vendor "Microsoft" for product "Office" and version "xp" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2000 Search vendor "Microsoft" for product "Office Word" and version "2000" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | * | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2000 Search vendor "Microsoft" for product "Office Word" and version "2000" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | sp1 Search vendor "Microsoft" for product "Office System" and version "sp1" | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2002 Search vendor "Microsoft" for product "Office Word" and version "2002" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2000 Search vendor "Microsoft" for product "Office" and version "2000" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2002 Search vendor "Microsoft" for product "Office Word" and version "2002" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2003 Search vendor "Microsoft" for product "Office" and version "2003" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2002 Search vendor "Microsoft" for product "Office Word" and version "2002" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | xp Search vendor "Microsoft" for product "Office" and version "xp" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2002 Search vendor "Microsoft" for product "Office Word" and version "2002" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | * | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2002 Search vendor "Microsoft" for product "Office Word" and version "2002" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | sp1 Search vendor "Microsoft" for product "Office System" and version "sp1" | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2003 Search vendor "Microsoft" for product "Office Word" and version "2003" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2000 Search vendor "Microsoft" for product "Office" and version "2000" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2003 Search vendor "Microsoft" for product "Office Word" and version "2003" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2003 Search vendor "Microsoft" for product "Office" and version "2003" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2003 Search vendor "Microsoft" for product "Office Word" and version "2003" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | xp Search vendor "Microsoft" for product "Office" and version "xp" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2003 Search vendor "Microsoft" for product "Office Word" and version "2003" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | * | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2003 Search vendor "Microsoft" for product "Office Word" and version "2003" | sp3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | sp1 Search vendor "Microsoft" for product "Office System" and version "sp1" | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2007 Search vendor "Microsoft" for product "Office Word" and version "2007" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2000 Search vendor "Microsoft" for product "Office" and version "2000" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2007 Search vendor "Microsoft" for product "Office Word" and version "2007" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2003 Search vendor "Microsoft" for product "Office" and version "2003" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2007 Search vendor "Microsoft" for product "Office Word" and version "2007" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | xp Search vendor "Microsoft" for product "Office" and version "xp" | sp3 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2007 Search vendor "Microsoft" for product "Office Word" and version "2007" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | * | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Word Search vendor "Microsoft" for product "Office Word" | 2007 Search vendor "Microsoft" for product "Office Word" and version "2007" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Office System Search vendor "Microsoft" for product "Office System" | sp1 Search vendor "Microsoft" for product "Office System" and version "sp1" | 2007 |
Safe
|
| Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2004 Search vendor "Microsoft" for product "Office" and version "2004" | mac |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2008 Search vendor "Microsoft" for product "Office" and version "2008" | mac |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Compatibility Pack For Word Excel Ppt 2007 Search vendor "Microsoft" for product "Office Compatibility Pack For Word Excel Ppt 2007" | * | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Compatibility Pack For Word Excel Ppt 2007 Search vendor "Microsoft" for product "Office Compatibility Pack For Word Excel Ppt 2007" | * | sp1 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Word Viewer Search vendor "Microsoft" for product "Office Word Viewer" | 2003 Search vendor "Microsoft" for product "Office Word Viewer" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Word Viewer Search vendor "Microsoft" for product "Office Word Viewer" | 2003 Search vendor "Microsoft" for product "Office Word Viewer" and version "2003" | sp3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Open Xml File Format Converter Search vendor "Microsoft" for product "Open Xml File Format Converter" | * | mac |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Works Search vendor "Microsoft" for product "Works" | 8.0 Search vendor "Microsoft" for product "Works" and version "8.0" | - |
Affected
| ||||||