CVE-2008-1091

No fix known EPSS 41%

Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."

Published 2008-05-13 · CVE record · OSV

Products: microsoft office, microsoft office_compatibility_pack_for_word_excel_ppt_2007, microsoft word_viewer