CVE-2008-1091

CVE-2008-1091 is an unspecified vulnerability in Microsoft Word across various Office versions (2000, XP SP3, 2003 SP2/SP3, and 2007 Office System SP1 and earlier) that allows remote code execution. This critical vulnerability, also known as "Object Parsing Vulnerability," is triggered by a malformed string within a Rich Text Format (.rtf) file, leading to a heap-based buffer overflow due to a "memory calculation error." With a CVSS score of 9.3, it presents a high risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its severity and high FAUCET Risk Score of 98/100, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.