CVE:CVE-2008-1091
CNNVD:CNNVD-200805-116
Microsoft Word是Office套件中的文字处理软件。
Word处理特制RTF格式(.rtf)文件的方式中存在堆溢出漏洞，如果用户在Word中打开带有畸形字符串的特制.rtf文件，或在富文本电子邮件中预览带有畸形字符串的特制.rtf文件，就会触发这个溢出，导致执行任意指令。
solution:Upgrade microsoft office to a higher version than 2000:sp3,2003:sp2,2003:sp3,2004,2007,2007_sp1,2008,xp:sp3,and avoid the version 2000:sp3,2003:sp2,2003:sp3,2004,2007,2007_sp1,2008,xp:sp3; Upgrade microsoft office_compatibility_pack_for_word_excel_ppt_2007 to a higher version than *; Upgrade microsoft word_viewer to a higher version than 2003,and avoid the version 2003