Description
wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation Vulnerability."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5309 ↗
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=659 ↗
- http://marc.info/?l=bugtraq&m=120361015026386&w=2 ↗
- http://secunia.com/advisories/28904 ↗
- http://www.securityfocus.com/bid/27657 ↗
- http://www.us-cert.gov/cas/techalerts/TA08-043C.html ↗
- http://www.vupen.com/english/advisories/2008/0513/references ↗
- http://www.securitytracker.com/id?1019386 ↗
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011 ↗