Lucene search

K
cve[email protected]CVE-2008-1434
HistoryMay 13, 2008 - 10:20 p.m.

CVE-2008-1434

2008-05-1322:20:00
CWE-399
web.nvd.nist.gov
113
cve-2008-1434
microsoft word
vulnerability
remote code execution
html
css
memory corruption

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.753 High

EPSS

Percentile

98.1%

Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a “memory handling error” that triggers memory corruption.

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.753 High

EPSS

Percentile

98.1%