Remote Code Execution Risk in Microsoft Office Products and Word Viewer

CVE-2008-4028

Summary

A remote code execution vulnerability exists in multiple versions of Microsoft Office products and Word Viewer due to improper handling of control words in RTF files and rich text emails. When an attacker crafts a malicious RTF document or email message, it can trigger incorrect memory allocation leading to a heap-based buffer overflow. This flaw can potentially allow an attacker to execute arbitrary code on users' machines without their knowledge, compromising system security.

References