← Database

CVE-2008-1092

CRITICAL CVSS: 9.3 Published: 2008-03-25 Modified: 2026-06-16

Description

Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.

Affected Platforms

Microsoft Windows XpMicrosoft Windows 2000Microsoft Windows 2003 ServerMicrosoft Word

Weakness Type

CWE-119

References