CVE-2008-0108: Buffer Overflow

Published Feb 12, 2008

Updated

Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length Vulnerability."

Affected Software

4 affected components

Microsoft Office=2003-sp2

Microsoft Works=2005

Microsoft Office=2003-sp3

Microsoft Works=8.0

Event History

Feb 12, 2008

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0108?

CVE-2008-0108 is considered a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2008-0108?

To fix CVE-2008-0108, users should apply the latest security updates from Microsoft for affected software versions.

What software is affected by CVE-2008-0108?

CVE-2008-0108 affects Microsoft Office 2003 SP2 and SP3, Microsoft Works 8.0, and Microsoft Works Suite 2005.

How does CVE-2008-0108 work?

CVE-2008-0108 exploits a stack-based buffer overflow vulnerability triggered by specially crafted .wps files.

Are there any workarounds for CVE-2008-0108?

While there are no specific workarounds for CVE-2008-0108, avoiding the opening of untrusted .wps files can mitigate the risk.