CVE-2008-7217

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-13 · updated 2026-06-16
Weakness: CWE-264

Description

Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories.

Affected products

Microsoft Office: 2008

References

http://osvdb.org/44959
http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3B948488
http://osvdb.org/44959
http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3B948488

Get alerted when CVE-2008-7217 or the next vulnerability affects your stack