Oval Definition:
oval:org.mitre.oval:def:5897
Revision Date
:
2014-02-03
Version
:
5
Title
:
Word Record Parsing Vulnerability
Description
:
Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc.
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2008-2244
Platform(s)
:
Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s)
:
Microsoft Excel 2002
Microsoft Word 2003
Definition Synopsis
Microsoft Word 2002
Microsoft Word 2002 is installed
AND
Word 2002 SP3 or greater is installed
AND
WinWord.exe version is less than 10.0.6846.0
OR
Microsoft Word 2003
Microsoft Word 2003 is installed
AND
Word 2003 SP2 or greater is installed
AND
WinWord.exe version is less than 11.0.8227.0
BACK