Lucene search

K
cve[email protected]CVE-2008-1455
HistoryAug 13, 2008 - 12:41 a.m.

CVE-2008-1455

2008-08-1300:41:00
CWE-399
web.nvd.nist.gov
28
microsoft office
powerpoint
memory calculation error
cve-2008-1455
remote code execution
memory corruption
parsing overflow vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.687 Medium

EPSS

Percentile

98.0%

A “memory calculation error” in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 through SP1; and Office 2004 for Mac allows remote attackers to execute arbitrary code via a PowerPoint file with crafted list values that trigger memory corruption, aka “Parsing Overflow Vulnerability.”

Affected configurations

NVD
Node
microsoftcompatibility_pack_word_excel_powerpointMatch2007
OR
microsoftcompatibility_pack_word_excel_powerpointMatch2007sp1
OR
microsoftofficeMatch2000sp3
OR
microsoftofficeMatch2003sp2
OR
microsoftofficeMatch2003sp3
OR
microsoftofficeMatch2004mac
OR
microsoftofficeMatch2007
OR
microsoftofficeMatch2007sp1
OR
microsoftofficeMatchxpsp3
OR
microsoftoffice_powerpoint_viewerMatch2003

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.687 Medium

EPSS

Percentile

98.0%