Remote Code Execution Risk in Microsoft Office Products and Word Viewer
CVE-2008-4028

Currently unrated

Key Information:

Vendor: Microsoft
Status: Open Xml File Format Converter; Office; Office Word Viewer; Office Compatibility Pack For Word Excel Ppt 2007
Vendor: CVE Published:; 10 December 2008

What is CVE-2008-4028?

A remote code execution vulnerability exists in multiple versions of Microsoft Office products and Word Viewer due to improper handling of control words in RTF files and rich text emails. When an attacker crafts a malicious RTF document or email message, it can trigger incorrect memory allocation leading to a heap-based buffer overflow. This flaw can potentially allow an attacker to execute arbitrary code on users' machines without their knowledge, compromising system security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch