Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-1092
HistoryMar 25, 2008 - 4:44 p.m.

CVE-2008-1092

2008-03-2516:44:00
CWE-119
[email protected]
web.nvd.nist.gov
29
cve-2008-1092
buffer overflow
msjet40.dll
microsoft jet database engine
arbitrary code
word file

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.842 High

EPSS

Percentile

98.5%

JSON

Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.

Affected configurations

NVD
Node
microsoftwindows_2000Match-
OR
microsoftwindows_2003_serverMatchsp1
OR
microsoftwindows_xpMatch-
AND
microsoftwordMatch2000sp3
OR
microsoftwordMatch2002sp3
OR
microsoftwordMatch2003sp2
OR
microsoftwordMatch2003_sp3
OR
microsoftwordMatch2007
OR
microsoftwordMatch2007_sp1

Related

cvelist 4
cert 1
seebug 1
prion 4
nvd 4
securityvulns 3
exploitdb 1
saint 4
checkpoint_advisories 1
nessus 1
openvas 2
cve 3
cvelist
cvelist
CVE-2008-1092
2008-03-25 16:00:00
CVE-2007-6026
2007-11-20 00:00:00
CVE-2008-1200
2022-10-03 16:13:46
cert
cert
Microsoft Jet Engine stack buffer overflow
2008-03-22 00:00:00
seebug
seebug
Microsoft Jetๆ•ฐๆฎๅบ“ๅผ•ๆ“ŽMDBๆ–‡ไปถ่งฃๆž่ฟœ็จ‹ๆ ˆๆบขๅ‡บๆผๆดž(ms08-028)
2008-05-17 00:00:00
prion
prion
Buffer overflow
2008-03-25 16:44:00
Stack overflow
2007-11-20 00:46:00
Code injection
2008-03-06 21:44:00
nvd
nvd
CVE-2008-1092
2008-03-25 16:44:00
CVE-2007-6026
2007-11-20 00:46:00
CVE-2008-1200
2008-03-06 21:44:00
securityvulns
securityvulns
Microsoft Security Bulletin MS08-028 โ€“ Critical Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution (950749)
2008-05-14 00:00:00
Microsoft Jet engine buffer overflow
2008-05-14 00:00:00
TPTI-08-04: Microsoft Office Jet Database Engine Column Parsing Stack Overflow Vulnerability
2008-05-14 00:00:00
exploitdb
exploitdb
Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability
2007-11-16 00:00:00
saint
saint
Microsoft Jet Engine MDB file ColumnName buffer overflow
2007-11-23 00:00:00
Microsoft Jet Engine MDB file ColumnName buffer overflow
2007-11-23 00:00:00
Microsoft Jet Engine MDB file ColumnName buffer overflow
2007-11-23 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Jet Engine MDB File Parsing Buffer Overflow (CVE-2007-6026)
2010-03-08 00:00:00
nessus
nessus
MS08-028: Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution (950749)
2008-05-13 00:00:00
openvas
openvas
Microsoft Jet Database Engine Vulnerability (MS08-028)
2008-09-03 00:00:00
Windows Vulnerability in Microsoft Jet Database Engine
2008-09-03 00:00:00
cve
cve
CVE-2008-1200
2022-10-03 16:13:46
CVE-2007-6026
2007-11-20 00:46:00
CVE-2007-6357
2007-12-15 01:46:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.842 High

EPSS

Percentile

98.5%

JSON
Related for CVE-2008-1092
cvelist4cert1seebug1prion4nvd4securityvulns3exploitdb1saint4checkpoint_advisories1nessus1openvas2cve3