iDefense Security Advisory 08.12.08: Microsoft Office BMP Input Filter Heap Overflow Vulnerability

iDefense Security Advisory 08.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 12, 2008 I. BACKGROUND Microsoft Office contains a number of input filters. These input filters allow transparent conversion from external types into a form that the Office applications can use. More...

MS08-044: Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (924090)

The remote host is running a version of some Microsoft Office filters that are subject to various flaws that could allow arbitrary code to be run. An attacker may use these to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote...

CVE-2008-3020

CVE-2008-3020 is a remote code execution vulnerability in Microsoft Office filters, specifically in the BMPIMP32.FLT module used by Office BMP import handling. A crafted BMP image with a malformed header (e.g., an excessive number of colors) causes a heap buffer overflow/memory corruption in BMP ...

Microsoft Office Image Filter BMP Header Buffer Overflow (MS08-044; CVE-2008-1765; CVE-2008-3020)

BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability was reported in the way Microsoft Office handles BMP files.The vulnerability is due to a memory corruption error when a malformed BMP file is opened by any ofthe affected Microsoft Office...