CVE-2008-0108 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-0108
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0108

Description: Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length Vulnerability."

CVE Status: Candidate

References: ST 1019388 SAID Secunia Advisory: SA28904 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5202 MS http://www.microsoft.com/technet/security/bulletin/ms08-011.mspx MILW0RM http://www.milw0rm.com/exploits/5107 IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=660 HP http://marc.info/?l=bugtraq&m=120361015026386&w=2 CERT http://www.us-cert.gov/cas/techalerts/TA08-043C.html BID 27659

Return to the previous page.