MS08-011: Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution (947081)

The remote host is running a version of Microsoft Office Works Converter that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. Then a bug in the wps header handler would result in code execution. C...

Microsoft Works File Converter index table vulnerability

Added: 02/22/2008 CVE: CVE-2008-0105 BID: 27658 OSVDB: 41458 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

CVE-2008-0105

The CVE-2008-0105 entry concerns a remote-code-execution vulnerability in the Microsoft Works File Converter (wkcvqd01.dll) used by Office 2003 (SP2/SP3), Works 6/8. The flaw arises from insufficient validation of the section header index table in .wps files, allowing arbitrary code execution whe...