CVE-2008-1091

Related Files

Zero Day Initiative Advisory 08-023

Posted May 13, 2008

Authored by Tipping Point, wushi | Site zerodayinitiative.com

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page, open a malicious email, or open a malicious file. The specific flaw exists when parsing malformed RTF documents. When processing a combination of RTF tags a heap overflow occurs. Successful exploitation can lead to remote compromise of a system under the credentials of the currently logged in user.

tags | advisory, remote, overflow, arbitrary

advisories | CVE-2008-1091

SHA-256 | ce5e0e1da217cf6a295fc152a35c405a6f643eab3dd911f17018432089b72331

Download | Favorite | View