Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted (1) RTF file or (2) rich text e-mail message with multiple consecutive Drawing Object ("\do") tags, which triggers a "memory calculation error" and memory corruption, aka "Word RTF Object Parsing Vulnerability."

The remote Mac OS X host is running a version of Microsoft Office that is affected by several vulnerabilities.

If an attacker can trick a user on the affected host into opening a specially crafted Excel or Word file, these issues could be leveraged to execute arbitrary code subject to the user's privileges.

The remote host is running a version of Microsoft Word that may allow arbitrary code to be run on this host.

To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it.  Then a bug in the word record parsing handler would result in code execution.

ID	Name	Product	Family	Severity
50060	MS08-072 / MS08-074: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (957173 / 959070) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
35071	MS08-072: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (957173)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2008-4027

high

Tenable Plugins

high

high