Lucene search
+L

3 matches found

CVE
CVE
•added 2008/02/12 10:00 p.m.•81 views

CVE-2007-0216

CVE-2007-0216 is a remote code execution vulnerability in the Microsoft Works File Converter. It stems from improper validation of .wps section length headers in wkcvqd01.dll. A crafted .wps file could allow an attacker to take control of the affected system. Affected products include Microsoft O...

9.3CVSS7.4AI score0.38144EPSS
SaveExploits1References9Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/12 12:00 a.m.•4 views

CVE-2008-0105: Improper Input Validation

Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table Vulnerability."...

9.3CVSS6.5AI score0.43757EPSS
SaveExploits6References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/12 12:00 a.m.•3 views

CVE-2008-0108: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length...

9.3CVSS6.8AI score0.52632EPSS
SaveExploits7References2
Rows per page
Query Builder