CVE-2008-4024
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 29%
Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory Corruption Vulnerability."
Produtos afetados
n/a · n/aReferências
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5934http://www.coresecurity.com/content/word-arbitrary-freehttp://www.coresecurity.com/files/attachments/CORE-2008-0228-Word.pdfhttp://www.securityfocus.com/archive/1/499086/100/0/threadedhttp://www.securitytracker.com/id?1021370http://www.us-cert.gov/cas/techalerts/TA08-344A.htmlhttp://www.vupen.com/english/advisories/2008/3384