Description
Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length Vulnerability."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5202 ↗
- http://www.securitytracker.com/id?1019388 ↗
- http://marc.info/?l=bugtraq&m=120361015026386&w=2 ↗
- http://secunia.com/advisories/28904 ↗
- http://www.securityfocus.com/bid/27659 ↗
- http://www.us-cert.gov/cas/techalerts/TA08-043C.html ↗
- https://www.exploit-db.com/exploits/5107 ↗
- http://www.vupen.com/english/advisories/2008/0513/references ↗
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011 ↗
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=660 ↗