CVE-2008-4837

Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility…

published December 10, 2008

CVSS
—
EPSS
37%
Percentile
98.5
In the wild
Unconfirmed
What it is

⚠️ A crafty crafted Word document could lead to a stack-based buffer overflow in several versions of Microsoft Office – a malicious table property is all it takes! 📄✨ Think of it like a restaurant kitchen accepting a recipe that has a missing ingredient list. If they make the dish without checking, it could create a chaotic mix-up, leading to disastrous results in the food, or in this case, your system's memory! An attacker could exploit this vulnerability to run arbitrary code on your system when you open a compromised Word document. This means they could potentially gain control over your machine, access sensitive data, or even wreak havoc on your files – absolutely devastating!

Put simply

Think of it like a restaurant kitchen accepting a recipe that has a missing ingredient list. If they make the dish without checking, it could create a chaotic mix-up, leading to disastrous results in the food, or in this case, your system's memory! This vulnerability arises from a stack-based buffer overflow in Microsoft Office Word and related components, triggered by a malformed table property in a crafted document, causing memory corruption and allowing arbitrary code execution.

What to do

An attacker could exploit this vulnerability to run arbitrary code on your system when you open a compromised Word document. This means they could potentially gain control over your machine, access sensitive data, or even wreak havoc on your files – absolutely devastating! To protect yourself, ensure you're using a patched version of Microsoft Office that addresses this vulnerability. Regularly update your software to the latest versions and consider employing security filters that can detect malicious content before it reaches your inbox. You've got this! By taking these steps, you'll keep your system safe and sound. 🛡️💪

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.37422 · 98.5th percentile
Published
2008-12-10T13:33Z
EPSS history
Timeline
  • 10 DEC 13:33Z
    Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility…
    cvelistv5