CVE-2008-4025

CVE-2008-4025 is an integer overflow vulnerability affecting multiple Microsoft Office products, including Word, Outlook, and Word Viewer, across various versions and platforms. This flaw allows remote attackers to execute arbitrary code by crafting malicious RTF files or rich text email messages that trigger a heap-based buffer overflow. With a CVSS score of 9.3, it represents a critical risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While the vulnerability has a high EPSS and FAUCET Risk Score, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.