Microsoft Works File Converter index table vulnerability

Added: 02/22/2008 CVE: CVE-2008-0105 BID: 27658 OSVDB: 41458 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter index table vulnerability

Added: 02/22/2008 CVE: CVE-2008-0105 BID: 27658 OSVDB: 41458 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter index table vulnerability

Added: 02/22/2008 CVE: CVE-2008-0105 BID: 27658 OSVDB: 41458 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter index table vulnerability

Added: 02/22/2008 CVE: CVE-2008-0105 BID: 27658 OSVDB: 41458 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works文件转换器节头索引表内存破坏漏洞（MS08-011）

BUGTRAQ ID: 27658 CVECAN ID: CVE-2008-0105 Microsoft Works是微软在早期所发布的文件处理程序。 Works文件转换器在处理节头索引信息时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Works文件转换器（wkcvqd01.dll）在将Microsoft Works文档（.wps）转换为富文本格式（RTF）时没有正确地验证节头索引表信息，如果攻击者创建了特制的Works文档文档并修改了其中某些字段（如长度或计数值）的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Office 2003 Service Pack 3...

Microsoft Works文件转换器字段长度远程栈溢出漏洞（MS08-011）

BUGTRAQ ID: 27659 CVECAN ID: CVE-2008-0108 Microsoft Works是微软在早期所发布的文件处理程序。 Works文件转换器在处理畸形格式的字段长度信息存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Works文件转换器（wkcvqd01.dll）在将Microsoft Works文档（.wps）转换为富文本格式（RTF）时没有正确的验证字段长度信息，如果攻击者创建了特制的Works文档文档并修改了其中某些字段（如长度或计数值）的话，就可能触发栈溢出，导致执行任意指令。 Microsoft Office 2003 Service Pack...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Security Bulletin MS08-011 – Important Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution (947081)

Microsoft Security Bulletin MS08-011 – Important Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution 947081 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This important security update resolves three privately reported...

Microsoft Works / Microsoft Office multiple security vulnerabilities

Multiple buffer overflows and integer overflows on .wps files parsing...

Stack overflow

Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length...

Input validation

wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation Vulnerability."...

CVE-2008-0108

Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length...

CVE-2008-0105

Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table Vulnerability."...

CVE-2007-0216

wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation Vulnerability."...

CVE-2008-0108

Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length...

CVE-2008-0105

The CVE-2008-0105 entry concerns a remote-code-execution vulnerability in the Microsoft Works File Converter (wkcvqd01.dll) used by Office 2003 (SP2/SP3), Works 6/8. The flaw arises from insufficient validation of the section header index table in .wps files, allowing arbitrary code execution whe...

CVE-2008-0108

CVE-2008-0108 is a remote code execution vulnerability in Microsoft Works File Converter (wkcvqd01.dll) used to convert .wps files to Rich Text. The root cause is improper validation of field lengths in the Works File Converter, leading to a stack-based buffer overflow when handling crafted field...