CVE-2008-0109

CVE-2008-0109 describes a critical remote code execution vulnerability affecting Microsoft Word 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003. Attackers can exploit this by crafting malicious Word files containing specific File Information Block (FIB) fields, leading to length calculation errors and memory corruption. With a CVSS score of 9.3 (critical) and an EPSS score indicating higher exploitability than 98% of CVEs, this flaw allows for complete compromise of confidentiality, integrity, and availability with medium attack complexity. While not listed on KEV or having public exploit code in Metasploit or ExploitDB, its high FAUCET Risk Score of 98/100 suggests significant potential for exploitation, despite a lack of community discussion or media coverage.