« Volver al listado

CVE-2008-2752

Estado: ModificadaAlta (7.1)—💥 Exploit

Microsoft Word 2000 9.0.2812 y 2003 11.8106.8172, no gestiona correctamente las listas desordenadas, lo que permite a atacantes asistidos por el usuario, provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrariamente a través de un archivo .doc manipulado. NOTA: alguno de estos detalles han sido obtenidos de información de terceros.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Tecnologías afectadas (1)

Microsoft — Word

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-2752",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-06-18T19:41:00.000",
  "references": [
    {
      "url": "http://www.nullcode.com.ar/ncs/crash/video.htm",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.nullcode.com.ar/ncs/crash/video2.htm",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/29769",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-1.doc",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-2.doc",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-3.doc",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-4.doc",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43155",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.nullcode.com.ar/ncs/crash/video.htm",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.nullcode.com.ar/ncs/crash/video2.htm",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/29769",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-1.doc",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-2.doc",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-3.doc",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-4.doc",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43155",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        },
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .doc file.  NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "Microsoft Word 2000 9.0.2812 y 2003 11.8106.8172, no gestiona correctamente las listas desordenadas, lo que permite a atacantes asistidos por el usuario, provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrariamente a través de un archivo .doc manipulado. NOTA: alguno de estos detalles han sido obtenidos de información de terceros."
    }
  ],
  "lastModified": "2026-06-16T22:54:23.353",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AEBFF713-0884-43BF-9AB8-777664FD64AF"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5947AFC8-483F-4597-AB8F-214356E857BD"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C426AFDD-870F-4CAD-9E93-636714984259"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FEE7CC21-A458-49BB-B437-D5DF09339D83"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8CFD9BC0-8755-4C3B-A198-A7F2DEFA82AD"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "379C2A4A-78EF-473D-954B-F5DD76C3D6CF"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2003:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2FD0484E-6FF8-45DC-BFA9-03FC6DF2C602"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2003:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4182673-402A-4801-9A0F-2516EE923DB4"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2003:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80F8E09E-E7F7-4D86-B140-3933EDC54E1C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}