Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-4841
HistoryDec 10, 2008 - 2:00 p.m.

CVE-2008-4841

2008-12-1014:00:01
CWE-399
[email protected]
web.nvd.nist.gov
2

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.897 High

EPSS

Percentile

98.8%

JSON

The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: As of 20081210, it is unclear whether this vulnerability is related to a WordPad issue disclosed on 20080925 with a 2008-crash.doc.rar example, but there are insufficient details to be sure.

Affected configurations

NVD
Node
microsoftwordpad
OR
microsoftwordpadMatchunknown
AND
microsoftwindows_2000sp4
OR
microsoftwindows_server_2003sp1
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_xpsp2

Related

checkpoint_advisories 1
cvelist 2
cve 2
cert 1
prion 2
saint 4
seebug 1
mskb 1
nvd 1
ubuntucve 1
securityvulns 2
nessus 1
openvas 2
checkpoint_advisories
checkpoint_advisories
Microsoft WordPad Word 97 Text Converter List Structure Stack Overflow (MS09-010; CVE-2008-4841)
2009-04-14 00:00:00
cvelist
cvelist
CVE-2008-4841
2008-12-10 13:33:00
CVE-2009-0259
2009-01-22 23:00:00
cve
cve
CVE-2008-4841
2008-12-10 14:00:01
CVE-2009-0259
2009-01-22 23:30:04
cert
cert
Microsoft WordPad Text Converter vulnerable to remote code execution
2008-12-11 00:00:00
prion
prion
Memory corruption
2008-12-10 14:00:00
Memory corruption
2009-01-22 23:30:00
saint
saint
Microsoft WordPad Word 97 text converter XST buffer overflow
2009-04-17 00:00:00
Microsoft WordPad Word 97 text converter XST buffer overflow
2009-04-17 00:00:00
Microsoft WordPad Word 97 text converter XST buffer overflow
2009-04-17 00:00:00
seebug
seebug
Microsoftε†™ε­—ζΏζ–‡δ»Άθ½¬ζ’ε™¨θΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž
2008-12-11 00:00:00
mskb
mskb
MS09-010: Description of the update for Windows WordPad Converter: April 14, 2009
2018-04-17 00:00:00
nvd
nvd
CVE-2009-0259
2009-01-22 23:30:04
ubuntucve
ubuntucve
CVE-2009-0259
2009-01-22 00:00:00
securityvulns
securityvulns
Microsoft Wordpad / Microsoft Works multiple security vulnerabilities
2009-06-10 00:00:00
Microsoft Security Bulletin MS09-010 - Critical Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)
2009-04-14 00:00:00
nessus
nessus
MS09-010: Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)
2009-04-15 00:00:00
openvas
openvas
WordPad and Office Text Converter Memory Corruption Vulnerability (960477)
2008-12-12 00:00:00
WordPad and Office Text Converter Memory Corruption Vulnerability (960477)
2008-12-12 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.897 High

EPSS

Percentile

98.8%

JSON
Related for NVD:CVE-2008-4841
checkpoint_advisories1cvelist2cve2cert1prion2saint4seebug1mskb1nvd1ubuntucve1securityvulns2nessus1openvas2