VULNERABILITY INTELLIGENCE

CVE-2008-0109

CVSS score9.3 HIGH
EPSS probability30.87%
CISA KEVNot currently listed
Published2008-02-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.

Primary references