Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cloud.com/vulnerabilities/45905 - http://www.securitytracker.com/id?1021055 - http://www.vupen.com/english/advisories/2008/2825
CVE ID: CVE-2008-4004 State: PUBLISHED Published: 2008-10-14T21:00:00 Last Updated: 2024-08-07T10:00:42.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1 allows local users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - http://secunia.com/advisories/32291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45906 - http://www.securitytracker.com/id?1021055 - h
ories/32291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45906 - http://www.securitytracker.com/id?1021055 - http://www.vupen.com/english/advisories/2008/2825
CVE ID: CVE-2008-4005 State: PUBLISHED Published: 2008-10-14T21:00:00 Last Updated: 2024-08-07T10:00:42.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Application Express component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - http://secunia.com/advisories/32291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45907 - http://www.securitytracker.com/id?1021050 - http://www.vupen.com/english/advisories/2
mcloud.com/vulnerabilities/45907 - http://www.securitytracker.com/id?1021050 - http://www.vupen.com/english/advisories/2008/2825
CVE ID: CVE-2008-4006 State: PUBLISHED Published: 2009-01-14T01:00:00 Last Updated: 2024-08-07T10:00:42.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33525 - http://www.vupen.com/english/advisories/2009/0115 - http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html - http://www.securityfocus.com/bid/33177
CVE ID: CVE-2008-4007 State: PUBLISHED Published: 2009-01-14T02:00:00 Last Updated: 2024-08-07T10:00:42.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise Components component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33525 - http://www.vupen.com/english/advisories/2009/0115 - http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html - http://www.securityfocus.com/bid/33177 - http://
p://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html - http://www.securityfocus.com/bid/33177 - http://www.securitytracker.com/id?1021570
CVE ID: CVE-2008-4008 State: PUBLISHED Published: 2008-10-14T21:00:00 Last Updated: 2024-08-07T10:00:42.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a stack-based buffer overflow in the WebLogic Apache Connector, related to an invalid parameter. Additional Analyst Notes:
tack-based buffer overflow in the WebLogic Apache Connector, related to an invalid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=751 - http://www.securitytracker.com/id?1021056 - http://www.vupen.com/english/advisories/2008/2825
CVE ID: CVE-2008-4009 State: PUBLISHED Published: 2008-10-14T21:00:00 Last Updated: 2024-08-07T10:00:42.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.1, when configuring multiple authorizers, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45908 - http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - https://support.bea.com/application_content/product_portlets/securityadvisories/2802.html - http://www.secu
00299.html - https://support.bea.com/application_content/product_portlets/securityadvisories/2802.html - http://www.securitytracker.com/id?1021056 - http://secunia.com/advisories/32304 - http://www.vupen.com/english/advisories/2008/2825
CVE ID: CVE-2008-4010 State: PUBLISHED Published: 2008-10-14T21:00:00 Last Updated: 2024-08-07T10:00:42.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to "some NetUI tags." Additional Analyst Notes: - CVE Program Container: References: - https://support.bea.com/application_content/product_portlets/securityadvisories/2803.html - http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - https://exchange.xforce.ibmcloud.com/vulnerabi
ttp://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45909 - http://www.securitytracker.com/id?1021056 - http://secunia.com/advisories/32302 - http://www.vupen.com/english/advisories/2008/2825
CVE ID: CVE-2008-4011 State: PUBLISHED Published: 2008-10-14T21:00:00 Last Updated: 2024-08-07T10:00:42.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote authenticated users to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - http://www.securitytracker.com/id?1021056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45910 - http://www.vupen.com/english/advisories/2008/2825
CVE ID: CVE-2008-4012 State: PUBLISHED Published: 2008-10-14T21:00:00 Last Updated: 2024-08-07T10:00:42.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite WLW 8.1SP5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to "some NetUI pageflows." Additional Analyst Notes: - CVE Program Container: References: - https://support.bea.com/application_content/product_portlets/securityadvisories/2805.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45911 - http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - http://secun
loud.com/vulnerabilities/45911 - http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - http://secunia.com/advisories/32303 - http://www.securitytracker.com/id?1021056 - http://www.vupen.com/english/advisories/2008/2825
CVE ID: CVE-2008-4013 State: PUBLISHED Published: 2008-10-14T21:00:00 Last Updated: 2024-08-07T10:00:42.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - http://www.securitytracker.com/id?1021056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45912 - http://www.vupen.com/english/advisories/2008/2825
CVE ID: CVE-2008-4014 State: PUBLISHED Published: 2009-01-14T02:00:00 Last Updated: 2024-08-07T10:00:42.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Application Server allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33525 - http://www.vupen.com/english/advisories/2009/0115 - http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html - http://www.securitytracker.com/id?1021572 - http://www.securityfocus.com/bid/33177
CVE ID: CVE-2008-4015 State: PUBLISHED Published: 2009-01-14T01:00:00 Last Updated: 2024-08-07T10:00:42.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Streams component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_STREAMS_AUTH. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33525 - http://www.securitytracker.com/id?1021561 - http://www.vupen.com/english/advisories/2009/0115 - http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html - http://www.securityfocus.com/bid/33177 - http://osvdb.org/51345
CVE ID: CVE-2008-4016 State: PUBLISHED Published: 2009-01-14T02:00:00 Last Updated: 2024-08-07T10:00:42.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Collaborative Workspaces component in Oracle Collaboration Suite 10.1.2 allows remote authenticated users to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33525 - http://www.vupen.com/english/advisories/2009/0115 - http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html - http://www.securityfocus.com/bid/33177
CVE ID: CVE-2008-4017 State: PUBLISHED Published: 2009-01-14T02:00:00 Last Updated: 2024-08-07T10:00:42.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the OC4J component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33525 - http://www.vupen.com/english/advisories/2009/0115 - http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html - http://www.securitytracker.com/id?1021572 - http://www.securityfocus.com/bid/33177
CVE ID: CVE-2008-4018 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:42.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root ownership for this file, via unspecified vectors. NOTE: this can be leveraged to gain privileges. NOTE: this issue exists because of an incomplete fix for CVE-2007-5805. Additional Analyst Notes: - CVE Program Container: References: - http://aix.software.ibm.com/aix/efixes/security/swcons_advisory.asc - http://secunia.com/advisories/31739 - http://www.
http://aix.software.ibm.com/aix/efixes/security/swcons_advisory.asc - http://secunia.com/advisories/31739 - http://www.ibm.com/support/docview.wss?uid=isg1IZ18335 - http://www.vupen.com/english/advisories/2008/2490 - http://www.ibm.com/support/docview.wss?uid=isg1IZ18334 - http://www.ibm.com/support/docview.wss?uid=isg1IZ18338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44903 - http://www.ibm.com/support/docview.wss?uid=isg1IZ28943 - http://www.ibm.com/support/docview.wss?uid=isg1IZ18339 - http://www.securityfocus.com/bid/30999 - http://www.ibm.com/support/docview.wss?uid=isg1IZ18341 - http://securitytracker.com/id?1020818 - https://oval.cisecurity.org/repository/search/definitio
ew.wss?uid=isg1IZ18341 - http://securitytracker.com/id?1020818 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5932
CVE ID: CVE-2008-4019 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T10:00:42.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office SharePoint Server 2007 Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file containing a formula within a cell, aka "Formula Parsing Vulnerability." Additional Anal
rbitrary code via an Excel file containing a formula within a cell, aka "Formula Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45580 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.securitytracker.com/id?1021044 - http://www.vupen.com/english/advisories/2008/2808 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45581 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6102 - http://www.us-cert.gov/cas/tec
s://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6102 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - http://secunia.com/advisories/32211 - http://www.securityfocus.com/bid/31706
CVE ID: CVE-2008-4020 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T10:00:42.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Office XP SP3 allows remote attackers to inject arbitrary web script or HTML via a document that contains a "Content-Disposition: attachment" header and is accessed through a cdo: URL, which renders the content instead of raising a File Download dialog box, aka "Vulnerability in Content-Disposition Header Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2807 - http://secunia.com/advisories/32138 -
gram Container: References: - http://www.vupen.com/english/advisories/2008/2807 - http://secunia.com/advisories/32138 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45546 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000070.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-056 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45550 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5969 - http://jvn.jp/en/jp/JVN55410403/index.html - http://www.securitytracker.com/id?1021045 - http://www.securityfocus.
969 - http://jvn.jp/en/jp/JVN55410403/index.html - http://www.securitytracker.com/id?1021045 - http://www.securityfocus.com/bid/31693 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html
CVE ID: CVE-2008-4021 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4022 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4023 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T10:00:42.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6107 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.securityfocus.com/bid/31609 - http://www.securitytracker.com/id?10
rc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.securityfocus.com/bid/31609 - http://www.securitytracker.com/id?1021042 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45585 - http://www.vupen.com/english/advisories/2008/2811 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-060 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - http://secunia.com/advisories/32242
CVE ID: CVE-2008-4024 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:00:42.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 - http://www.securityfocus.com/archive/1/499086/100/0/thread
.com/en-us/security-updates/securitybulletins/2008/ms08-072 - http://www.securityfocus.com/archive/1/499086/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5934 - http://www.coresecurity.com/files/attachments/CORE-2008-0228-Word.pdf - http://www.securitytracker.com/id?1021370 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - http://www.vupen.com/english/advisories/2008/3384 - http://www.coresecurity.com/content/word-arbitrary-free
CVE ID: CVE-2008-4025 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:00:42.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via (1) an RTF file or (2) a rich text e-mail message containing an invalid number of points for a polyline or polygon, which triggers a heap-based buffer overflow, ak
essage containing an invalid number of points for a polyline or polygon, which triggers a heap-based buffer overflow, aka "Word RTF Object Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5682 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 - http://www.securitytracker.com/id?1021370 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - http://www.vupen.com/english/advisories/2008/3384 - http://secunia.com/secunia_research/2008-21/ - http://www.securityfocus.com/archive/1/499054/100/0/threaded
CVE ID: CVE-2008-4026 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:00:42.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Word document that contains a malformed value, which triggers memory corruption, aka "Word Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://do
aka "Word Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5807 - http://www.securitytracker.com/id?1021370 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - http://www.vupen.com/english/advisories/2008/3384
CVE ID: CVE-2008-4027 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:00:42.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted (1) RTF file or (2) rich text e-mail message with multiple consecutive Drawing Object ("\do") tags, which triggers a "memory calculation error" and memory corruption, aka "Word RTF Object Parsi
awing Object ("\do") tags, which triggers a "memory calculation error" and memory corruption, aka "Word RTF Object Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 - http://www.zerodayinitiative.com/advisories/ZDI-08-084 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6098 - http://www.securitytracker.com/id?1021370 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - http://www.vupen.com/english/advisories/2008/3384 - http://www.zerodayinitiative.com/advisories/ZDI-08-084/ - http://www.securityfocus.com/archive/1/499062/100/0/
08/3384 - http://www.zerodayinitiative.com/advisories/ZDI-08-084/ - http://www.securityfocus.com/archive/1/499062/100/0/threaded
CVE ID: CVE-2008-4028 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:00:42.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via crafted control words related to multiple Drawing Object tags in (1) an RTF file or (2) a rich text e-mail message, which triggers incorrect memory allocation and a heap-based buffer
n (1) an RTF file or (2) a rich text e-mail message, which triggers incorrect memory allocation and a heap-based buffer overflow, aka "Word RTF Object Parsing Vulnerability," a different vulnerability than CVE-2008-4030. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-08-085/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 - http://www.securityfocus.com/archive/1/499063/100/0/threaded - http://www.securitytracker.com/id?1021370 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - http://www.vupen.com/english/advisories/2008/3384 - https://oval.cisecurity.org/repository/search/definition/o
4A.html - http://www.vupen.com/english/advisories/2008/3384 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6096 - http://www.zerodayinitiative.com/advisories/ZDI-08-085