|
|
|
>> Microsoft Office Filters Command Execution Vulnerabilities (MS08-044)
|
Multiple vulnerabilities have been identified in Microsoft Office, which could be exploited by attackers to take complete control of an affected system. These issues are caused by memory corruption errors when processing specially crafted Encapsulated PostScript (EPS) files, and PICT, BMP, or WordPerfect Graphics (WPG) images, which could be exploited by attackers to crash an affected application or execute arbitrary code by tricking a user into opening a malicious Office file.
Affected Products
Microsoft Office 2000 Service Pack 3
Microsoft Office XP Service Pack 3
Microsoft Office 2003 Service Pack 2
Microsoft Office Project 2002 Service Pack 1
Microsoft Office Converter Pack
Microsoft Works 8
Solution
Apply patches :
http://www.microsoft.com/technet/security/bulletin/ms08-044.mspx
References
http://www.vupen.com/english/advisories/2008/2348
http://www.microsoft.com/technet/security/bulletin/ms08-044.mspx
Credits
Vulnerabilities reported by Shaun Colley (NGS Software), Damian Put, ZDI, and iDefense VCP.
ChangeLog
2008-08-12 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
