3 matches found
CVE-2007-0216
CVE-2007-0216 is a remote code execution vulnerability in the Microsoft Works File Converter. It stems from improper validation of .wps section length headers in wkcvqd01.dll. A crafted .wps file could allow an attacker to take control of the affected system. Affected products include Microsoft O...
CVE-2008-0105: Improper Input Validation
Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table Vulnerability."...
CVE-2008-0108: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length...