CVE-2008-4027 : Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3,

Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted (1) RTF file or (2) rich text e-mail message with multiple consecutive Drawing Object ("\do") tags, which triggers a "memory calculation error" and memory corruption, aka "Word RTF Object Parsing Vulnerability."

Published 2008-12-10 14:00:01

Updated 2018-10-30 16:25:58

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Memory CorruptionExecute code

Products affected by CVE-2008-4027

Microsoft » Office » Version: 2004 MAC Edition
cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*
Matching versions
Microsoft » Office » Version: 2008 MAC Edition
cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*
Matching versions
Microsoft » Works » Version: 8.0
cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*
Matching versions
Microsoft » Office Compatibility Pack For Word Excel Ppt 2007 » Update SP1
cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Office Compatibility Pack For Word Excel Ppt 2007
cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Office Word » Version: 2002 Update SP3
cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Office » Version: 2000 Update SP3
When used together with: Microsoft » Office » Version: 2003 Update SP3
When used together with: Microsoft » Office » Version: XP Update SP3
When used together with: Microsoft » Office System » Update 2007
When used together with: Microsoft » Office System » Version: SP1 Update 2007
Microsoft » Office Word » Version: 2007
cpe:2.3:a:microsoft:office_word:2007:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Office » Version: 2000 Update SP3
When used together with: Microsoft » Office » Version: 2003 Update SP3
When used together with: Microsoft » Office » Version: XP Update SP3
When used together with: Microsoft » Office System » Update 2007
When used together with: Microsoft » Office System » Version: SP1 Update 2007
Microsoft » Office Word » Version: 2003 Update SP3
cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Office » Version: 2000 Update SP3
When used together with: Microsoft » Office » Version: 2003 Update SP3
When used together with: Microsoft » Office » Version: XP Update SP3
When used together with: Microsoft » Office System » Update 2007
When used together with: Microsoft » Office System » Version: SP1 Update 2007
Microsoft » Office Word » Version: 2000 Update SP3
cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Office » Version: 2000 Update SP3
When used together with: Microsoft » Office » Version: 2003 Update SP3
When used together with: Microsoft » Office » Version: XP Update SP3
When used together with: Microsoft » Office System » Update 2007
When used together with: Microsoft » Office System » Version: SP1 Update 2007
Microsoft » Office Word Viewer » Version: 2003
cpe:2.3:a:microsoft:office_word_viewer:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Office Word Viewer » Version: 2003 Update SP3
cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*
Matching versions
Microsoft » Open Xml File Format Converter » MAC Edition
cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*
Matching versions
Microsoft » Office Outlook » Version: 2007 Update SP1
cpe:2.3:a:microsoft:office_outlook:2007:sp1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Office » Version: 2000 Update SP3
When used together with: Microsoft » Office » Version: 2003 Update SP3
When used together with: Microsoft » Office » Version: XP Update SP3
When used together with: Microsoft » Office System » Update 2007
When used together with: Microsoft » Office System » Version: SP1 Update 2007
Microsoft » Office Outlook » Version: 2007
cpe:2.3:a:microsoft:office_outlook:2007:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Office » Version: 2000 Update SP3
When used together with: Microsoft » Office » Version: 2003 Update SP3
When used together with: Microsoft » Office » Version: XP Update SP3
When used together with: Microsoft » Office System » Update 2007
When used together with: Microsoft » Office System » Version: SP1 Update 2007

Exploit prediction scoring system (EPSS) score for CVE-2008-4027

EPSS FAQ

64.65%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-4027

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2008-4027

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-4027

http://www.zerodayinitiative.com/advisories/ZDI-08-084
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6098
http://www.securitytracker.com/id?1021370

CVEs referencing this url
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072

CVEs referencing this url
http://www.us-cert.gov/cas/techalerts/TA08-344A.html

Microsoft Updates for Multiple Vulnerabilities | CISA
US Government Resource

CVEs referencing this url
http://www.securityfocus.com/archive/1/499062/100/0/threaded
http://www.zerodayinitiative.com/advisories/ZDI-08-084/
http://www.vupen.com/english/advisories/2008/3384

Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2008-4027

Products affected by CVE-2008-4027

Exploit prediction scoring system (EPSS) score for CVE-2008-4027

CVSS scores for CVE-2008-4027

CWE ids for CVE-2008-4027

References for CVE-2008-4027