Oval Definition:oval:org.mitre.oval:def:5897
Revision Date:2014-02-03Version:5
Title:Word Record Parsing Vulnerability
Description:Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2008-2244
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):Microsoft Excel 2002
Microsoft Word 2003
Definition Synopsis
  • Microsoft Word 2002
  • Microsoft Word 2002 is installed
  • AND Word 2002 SP3 or greater is installed
  • AND WinWord.exe version is less than 10.0.6846.0
  • OR Microsoft Word 2003
  • Microsoft Word 2003 is installed
  • AND Word 2003 SP2 or greater is installed
  • AND WinWord.exe version is less than 11.0.8227.0
  • BACK