VulnerabilityModified
CVE-2008-1092
Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008.
HIGH 9.3EPSS 25.9%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 25.9%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 25.88% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- microsoft/word
- Source
- secure@microsoft.com
References
- http://marc.info/?l=bugtraq&m=121129490723574&w=2
- http://www.kb.cert.org/vuls/id/936529US Government Resource
- http://www.microsoft.com/technet/security/advisory/950627.mspx
- http://www.securitytracker.com/id?1019686
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41380
- http://marc.info/?l=bugtraq&m=121129490723574&w=2
- http://www.kb.cert.org/vuls/id/936529US Government Resource
- http://www.microsoft.com/technet/security/advisory/950627.mspx
- http://www.securitytracker.com/id?1019686
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41380
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.