CVE-2008-0103

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 30.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-02-12 · updated 2026-06-16
Weakness: CWE-399

Description

Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Office document that contains a malformed object, related to a "memory handling error," aka "Microsoft Office Execution Jump Vulnerability."

Affected products

Microsoft Office: 2000-sp3, 2003-sp2, 2004, xp-sp3

References

http://marc.info/?l=bugtraq&m=120361015026386&w=2
http://secunia.com/advisories/28909
http://www.securityfocus.com/bid/27738
http://www.securitytracker.com/id?1019375
http://www.us-cert.gov/cas/techalerts/TA08-043C.html
http://www.vupen.com/english/advisories/2008/0515/references
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-013
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5407
http://marc.info/?l=bugtraq&m=120361015026386&w=2
http://secunia.com/advisories/28909
http://www.securityfocus.com/bid/27738
http://www.securitytracker.com/id?1019375

Get alerted when CVE-2008-0103 or the next vulnerability affects your stack