Microsoft Works 8.0 File Converter Field Length Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27659/info Microsoft Works File Converter is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input. An attacker could exploit this issue by enticing a victim to open a...

Microsoft Office BMP输入过滤器堆溢出漏洞（MS08-044）

BUGTRAQ ID: 30599 CVECAN ID: CVE-2008-3020 Microsoft Office是非常流行的办公软件套件。 Office的BMPIMP32.FLT过滤器模块没有正确处理office文档中的BMP图形，如果BMP图形文件头中指定了大量的颜色的话，则打开该文件就可能触发堆溢出，导致执行任意指令。 Microsoft Office XP SP3 Microsoft Office Converter Pack Microsoft Office 2000 SP3 Microsoft Works 8.0 临时解决方法：...

CVE-2008-0108

CVE-2008-0108 is a remote code execution vulnerability in Microsoft Works File Converter (wkcvqd01.dll) used to convert .wps files to Rich Text. The root cause is improper validation of field lengths in the Works File Converter, leading to a stack-based buffer overflow when handling crafted field...

Microsoft Works File Converter Section Header Index Table Remote Code Execution Vulnerability

Description Microsoft Works File Converter is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input. An attacker could exploit this issue by enticing a victim to open a malicious '.wps' file. Successfully exploiting this issue would allow the...

Microsoft Works File Converter Section Length Header Remote Heap Overflow Vulnerability

Description Microsoft Works File Converter is prone to a remote heap-overflow vulnerability because it fails to adequately validate user-supplied input. An attacker could exploit this issue by enticing a victim to open a malicious '.wps' file. Successfully exploiting this issue would allow the...

Microsoft Works 8.0 - File Converter Field Length Remote Code Execution

// source: https://www.securityfocus.com/bid/27659/info Microsoft Works File Converter is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input. An attacker could exploit this issue by enticing a victim to open a malicious '.wps' file...