CVE		CVE-2008-1434
Status		UNKNOWN
Description		Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a "memory handling error" that triggers memory corruption.
Severity		High
CVSS score		9,3
CVSS vector		(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Phase		ASSIGNED (12.04.2011)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1434
References		BID : 29105
		CERT : TA08-134A
		HP : SSRT080071
		HP : SSRT080071
		IDEFENSE : 20080513 Microsoft Word CSS Processing Memory Corruption Vulnerability
		MS : MS08-026
		OVAL : oval:org.mitre.oval:def:5012
		SECTRACK : 1020014
		SECUNIA : 30143
		VUPEN : ADV-2008-1504
SecurityVulns:		Microsoft Word multiple security vulnerabilities