CVE-2008-1434

Microsoft Office - Use-After-Free via HTML Document with CSS Selectors

Title source: llm
STIX 2.1

Description

Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a "memory handling error" that triggers memory corruption.

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1020014
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1504/references
Third Party Advisory third-party-advisory x_refsource_idefense
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=700
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=121129490723574&w=2
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30143
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA08-134A.html
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29105
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5012

Scores

EPSS 0.3087
EPSS Percentile 98.1%

Details

CWE
CWE-399
Status published
Products (9)
microsoft/office 2000 sp3
microsoft/office 2003 sp2 (2 CPE variants)
microsoft/office 2004
microsoft/office 2007
microsoft/office 2007_sp1
microsoft/office 2008
microsoft/office xp sp3
microsoft/office_compatibility_pack_for_word_excel_ppt_2007 (2 CPE variants)
microsoft/word_viewer 2003 (2 CPE variants)
Published May 13, 2008
Tracked Since Feb 18, 2026