CVE-2008-2244

CRITICAL 9.3CVE-2008-2244 · Published 09/07/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
office word microsoft	`= 2002`	No fix yet

Description

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc.

References

blogs.technet.com/msrc/archive/2008/07/08/vulnerability-in-microsoft-word-could-allow-remote-code-execution.aspx
isc.sans.org/diary.html
marc.info
secunia.com/advisories/30975 · Vendor Advisory
microsoft.com/technet/security/advisory/953635.mspx
securityfocus.com/bid/30124
securitytracker.com/id
us-cert.gov/cas/techalerts/TA08-225A.html · US Government Resource
vupen.com/english/advisories/2008/2028
exchange.xforce.ibmcloud.com/vulnerabilities/43663
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5897

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free