Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-3021
HistoryAug 12, 2008 - 11:41 p.m.

CVE-2008-3021

2008-08-1223:41:00
CWE-399
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.697 Medium

EPSS

Percentile

98.0%

JSON

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file with an invalid bits_per_pixel field, aka the “PICT Filter Parsing Vulnerability,” a different vulnerability than CVE-2008-3018.

Affected configurations

NVD
Node
microsoftofficeMatch2000sp3
OR
microsoftofficeMatch2003sp2
OR
microsoftofficeMatchxpsp3
OR
microsoftoffice_converter_pack
OR
microsoftworksMatch8.0

Related

prion 2
cvelist 2
nvd 1
cve 2
zdi 1
checkpoint_advisories 3
nessus 1
seebug 2
securityvulns 3
openvas 2
prion
prion
Design/Logic Flaw
2008-08-12 23:41:00
Security feature bypass
2008-08-12 23:41:00
cvelist
cvelist
CVE-2008-3021
2008-08-12 23:00:00
CVE-2008-3018
2008-08-12 23:00:00
nvd
nvd
CVE-2008-3018
2008-08-12 23:41:00
cve
cve
CVE-2008-3018
2008-08-12 23:41:00
CVE-2008-3021
2008-08-12 23:41:00
zdi
zdi
Microsoft Windows Graphics Rendering Engine PICT Heap Corruption Vulnerability
2008-08-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office PICT Filter Map Structure Memory Corruption - Ver2 (CVE-2008-3021)
2014-04-16 00:00:00
Microsoft Office PICT Filter Map Structure Memory Corruption (MS08-044; CVE-2008-3021)
2008-08-12 00:00:00
Microsoft Office PICT Filter Invalid Length Memory Corruption (MS08-044; CVE-2008-3018)
2008-08-12 00:00:00
nessus
nessus
MS08-044: Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (924090)
2008-08-13 00:00:00
seebug
seebug
Microsoft Office WPG图形文件处理堆溢出漏洞（MS08-044）
2008-08-14 00:00:00
Microsoft Office畸形EPS/PICT过滤器远程代码执行漏洞（MS08-044）
2008-08-19 00:00:00
securityvulns
securityvulns
ZDI-08-049: Microsoft Windows Graphics Rendering Engine PICT Heap Corruption
2008-08-13 00:00:00
Microsoft Security Bulletin MS08-044 – Critical Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (924090)
2008-08-12 00:00:00
Microsoft Office / Word / Excel / Power Point multiple security vulnerabilities
2008-08-13 00:00:00
openvas
openvas
Microsoft Office Filters Could Allow Remote Code Execution Vulnerabilities (924090)
2008-08-19 00:00:00
Microsoft Office Filters Could Allow Remote Code Execution Vulnerabilities (924090)
2008-08-19 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.697 Medium

EPSS

Percentile

98.0%

JSON
Related for NVD:CVE-2008-3021
prion2cvelist2nvd1cve2zdi1checkpoint_advisories3nessus1seebug2securityvulns3openvas2