Unscored CVE-2008-1092 EUVD-2008-1103GHSA-m5h6-g75q-rpq4

Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a c…

Published Mar 25, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.

References

1019686 vdb-entry
VU#936529 third-party-advisory
MS08-028 vendor-advisory
microsoft-jet-msjet40-bo(41380) vdb-entry
SSRT080071 vendor-advisory
950627 vendor-advisory