Secunia

Some vulnerabilities have been reported in Microsoft Office and Microsoft Works, which can be exploited by malicious people to compromise a user's system.

1) A boundary error in the Works File Converter (wkcvqd01.dll) when processing section length headers can be exploited to cause a stack-based buffer overflow via a specially crafted Works (.wps) file.

2) An error in the Works File Converter when processing section header index table information can be exploited via a specially crafted Works (.wps) file.

3) An error in the Works File Converter when processing field length information can be exploited to corrupt memory via a specially crafted Works (.wps) file.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) Reported by sillypea via VeriSign iDefense VCP.
2) The vendor credits IBM ISS X-Force.
3) Reported by Damian Put via VeriSign iDefense VCP.

Changelog
Further details available in Customer Area

Original Advisory
MS08-011 (KB947081):
http://www.microsoft.com/technet/security/Bulletin/MS08-011.mspx

iDefense:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=659
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=660

IBM ISS:
http://www.iss.net/threats/287.html

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area