Lucene search

K
cve[email protected]CVE-2008-7217
HistoryOct 03, 2022 - 4:13 p.m.

CVE-2008-7217

2022-10-0316:13:53
CWE-264
web.nvd.nist.gov
19
cve-2008-7217
microsoft office
mac
security policy
permissions
nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.0%

Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories.

Affected configurations

NVD
Node
microsoftofficeMatch2008mac
CPENameOperatorVersion
microsoft:officemicrosoft officeeq2008

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.0%

Related for CVE-2008-7217