CVE-2008-4024
No fix known EPSS 29%
Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory Corruption Vulnerability."
Products: microsoft office, microsoft office_compatibility_pack_for_word_excel_ppt_2007, microsoft office_word_viewer, microsoft open_xml_file_format_converter, microsoft works, microsoft office_outlook, microsoft office_word