exploitDog

CVE-2008-3019

Опубликовано: 12 авг. 2008

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript (EPS) file, which allows remote attackers to execute arbitrary code via a crafted EPS file, aka the "Malformed EPS Filter Vulnerability."

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_converter_pack:*:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.54114

Средний

9.3 Critical

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-q244-mfxp-9v7p

github

почти 4 года назад

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript (EPS) file, which allows remote attackers to execute arbitrary code via a crafted EPS file, aka the "Malformed EPS Filter Vulnerability."

EPSS

Процентиль: 98%

0.54114

Средний

9.3 Critical

CVSS2

Дефекты

CWE-399