CVE-2008-2244

EXPLOITED IN THE WILD

Microsoft Office Word 2002 SP3 - Remote Code Execution via Malformed Data in .doc File

Title source: llm

Exploitation Summary

CVE-2008-2244 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).

Description

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc.

References (11)

Core 11

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30975

Various Sources x_refsource_misc

http://isc.sans.org/diary.html?storyid=4696

Vendor Advisory x_refsource_confirm

http://www.microsoft.com/technet/security/advisory/953635.mspx

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA08-225A.html

Various Sources x_refsource_confirm

http://blogs.technet.com/msrc/archive/2008/07/08/vulnerability-in-microsoft-word-could-allow-remote-code-execution.aspx

Mailing List vendor-advisory x_refsource_hp

http://marc.info/?l=bugtraq&m=121915960406986&w=2

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/2028

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5897

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/30124

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/43663

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020447

Scores

EPSS 0.3214

EPSS Percentile 98.1%

Details

VulnCheck KEV 2008-07-09

InTheWild.io 2017-09-29

CWE

CWE-399

Status published

Products (1)

microsoft/office_word 2002 sp3

Published Jul 09, 2008

Tracked Since Feb 18, 2026