Unscored CVE-2008-3020 EUVD-2008-3010GHSA-697x-wwx6-cm5r

Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remot…

Published Aug 12, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP file, aka the "Malformed BMP Filter Vulnerability."

References

MS08-044 vendor-advisory
TA08-225A third-party-advisory
HPSBST02360 vendor-advisory
1020673 vdb-entry
ADV-2008-2348 vdb-entry
31336 third-party-advisory
30599 vdb-entry
oval:org.mitre.oval:def:5868 vdb-entry signature