Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via (1) an RTF file or (2) a rich text e-mail message containing an invalid number of points for a polyline or polygon, which triggers a heap-based buffer overflow, aka "Word RTF Object Parsing Vulnerability."
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: microsoft
Published: 2008-12-10T13:33:00
Updated: 2024-08-07T10:00:42.305Z
Reserved: 2008-09-10T00:00:00
Link: CVE-2008-4025
Vulnrichment
No data.
NVD
Status : Modified
Published: 2008-12-10T14:00:00.800
Modified: 2024-11-21T00:50:42.730
Link: CVE-2008-4025
Redhat
No data.