Buffer overflow in Microsoft Windows 2000
CVE-2008-1092
Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.
Vulnerability class: Buffer Overflow
EPSS: 0.259 (97.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2000
- Microsoft Windows_2003_server — versions sp1
- Microsoft Windows_xp
- Microsoft Word — versions 2000, 2002, 2003
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_XF)
- secure@microsoft.com (x_refsource_HP, vendor-advisory)
- secure@microsoft.com (vendor-advisory, x_refsource_MSKB)