CVE:CVE-2008-4027
CNNVD:CNNVD-200812-132
Word是微软Office套件中的文件处理工具。
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, 和 2007 Gold and SP1; Outlook 2007 Gold 和 SP1; Word Viewer 2003 Gold 和 SP3; Office Compatibility Pack for Word, Excel, 和 PowerPoint 2007 File Formats Gold 和 SP1; 和 Office 2004 for Mac存在内存两次释放漏洞，这允许远程攻击者通过一个带有多个连续绘图对象 ("\do") 标签的特制的(1) RTF 文件或(2) 多格式文本e-mail 消息来触发一个"内存计算错误"和内存破坏，从而执行任意的代码。此漏洞又名"Word RTF对象解析漏洞"。
solution:Upgrade microsoft office to a higher version than 2004,2008,and avoid the version 2004,2008; Upgrade microsoft office_compatibility_pack_for_word_excel_ppt_2007 to a higher version than *,*:sp1,and avoid the version *:sp1; Upgrade microsoft office_word_viewer to a higher version than 2003,2003:sp3,and avoid the version 2003,2003:sp3; Upgrade microsoft open_xml_file_format_converter to a higher version than *; Upgrade microsoft works to a higher version than 8.0,and avoid the version 8.0; Upgrade microsoft office_outlook to a higher version than 2007,2007:sp1,and avoid the version 2007,2007:sp1; Upgrade microsoft office_word to a higher version than 2000:sp3,2002:sp3,2003:sp3,2007,and avoid the version 2000:sp3,2002:sp3,2003:sp3,2007