Skip to content
OpenAdvisories
Unscored CVE-2008-3019 EUVD-2008-3009GHSA-q244-mfxp-9v7p

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated Pos…

Published Aug 12, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript (EPS) file, which allows remote attackers to execute arbitrary code via a crafted EPS file, aka the "Malformed EPS Filter Vulnerability."

References