CVE-2008-1898

CVE-2008-1898 affects the WkImgSrv.dll ActiveX control (WksPictureInterface) in Microsoft Works 7 and Microsoft Office 2003/2007. A boundary/argument handling flaw allows remote code execution or browser crash when an invalid WksPictureInterface value is processed, typically via a crafted web pag...

CVE-2008-1898

A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service browser crash via an invalid WksPictureInterface property value, which triggers an improper...

Microsoft Works 7 WkImgSrv.dll crash POC

No description provided by source. html head titleMicrosoft Works 7 WkImgSrv.dll crash POC/title script language="JavaScript" function payload var num = -1; obj.WksPictureInterface = num; /script /head body onload="JavaScript: return payload;"...

Microsoft Works 7 WkImgSrv.dll ActiveX Denial of Service PoC

No description provided by source. html head titleMicrosoft Works 7 WkImgSrv.dll crash POC/title script language="JavaScript" function payload var num = -1; obj.WksPictureInterface = num; /script /head body onload="JavaScript: return payload;"...

Microsoft Works 7 WkImgSrv.dll ActiveX Denial of Service PoC

Exploit for unknown platform in category dos / poc ============================================================ Microsoft Works 7 WkImgSrv.dll ActiveX Denial of Service PoC ============================================================ Microsoft Works 7 WkImgSrv.dll crash POC function payload var n...

Microsoft Works 7 'WkImgSrv.dll' ActiveX Control Remote Code Execution Vulnerability

Description Microsoft Works 7 'WkImgSrv.dll' ActiveX control is prone to a remote code-execution vulnerability because it fails to sufficiently verify user-supplied input. An attacker can exploit this issue to run arbitrary attacker-supplied code in the context of the currently logged-in user...

Microsoft Works 7 - 'WkImgSrv.dll' ActiveX Denial of Service (PoC)

Microsoft Works 7 WkImgSrv.dll crash POC function payload var num = -1; obj.WksPictureInterface = num; milw0rm.com 2008-04-17...

Microsoft Works 7 - WkImgSrv.dll ActiveX Denial of Service (PoC)

Microsoft Works 7 - WkImgSrv.dll ActiveX Denial of Service PoC Microsoft Works 7 WkImgSrv.dll crash POC function payload var num = -1; obj.WksPictureInterface = num; milw0rm.com 2008-04-17...

msworks-dos.txt

DLL VERSION 7.03.0616.0 TEST ON IE7+XPSP2CN MYBLOG:http://hi.baidu.com/nansec/ 0DAY? I don't know. POC: Microsoft Works 7 WkImgSrv.dll crash POC function payload var num = -1; obj.WksPictureInterface = num;...

Microsoft Works File Converter index table vulnerability

Added: 02/22/2008 CVE: CVE-2008-0105 BID: 27658 OSVDB: 41458 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter index table vulnerability

Added: 02/22/2008 CVE: CVE-2008-0105 BID: 27658 OSVDB: 41458 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter index table vulnerability

Added: 02/22/2008 CVE: CVE-2008-0105 BID: 27658 OSVDB: 41458 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter index table vulnerability

Added: 02/22/2008 CVE: CVE-2008-0105 BID: 27658 OSVDB: 41458 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works文件转换器节头索引表内存破坏漏洞（MS08-011）

BUGTRAQ ID: 27658 CVECAN ID: CVE-2008-0105 Microsoft Works是微软在早期所发布的文件处理程序。 Works文件转换器在处理节头索引信息时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Works文件转换器（wkcvqd01.dll）在将Microsoft Works文档（.wps）转换为富文本格式（RTF）时没有正确地验证节头索引表信息，如果攻击者创建了特制的Works文档文档并修改了其中某些字段（如长度或计数值）的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Office 2003 Service Pack 3...

Microsoft Works文件转换器字段长度远程栈溢出漏洞（MS08-011）

BUGTRAQ ID: 27659 CVECAN ID: CVE-2008-0108 Microsoft Works是微软在早期所发布的文件处理程序。 Works文件转换器在处理畸形格式的字段长度信息存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Works文件转换器（wkcvqd01.dll）在将Microsoft Works文档（.wps）转换为富文本格式（RTF）时没有正确的验证字段长度信息，如果攻击者创建了特制的Works文档文档并修改了其中某些字段（如长度或计数值）的话，就可能触发栈溢出，导致执行任意指令。 Microsoft Office 2003 Service Pack...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Works File Converter field length buffer overflow

Added: 02/19/2008 CVE: CVE-2008-0108 BID: 27659 OSVDB: 41459 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Microsoft Security Bulletin MS08-011 – Important Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution (947081)

Microsoft Security Bulletin MS08-011 – Important Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution 947081 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This important security update resolves three privately reported...