CVE-2008-3020: Critical severity microsoft office converter pack vulnerability
Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP file, aka the "Malformed BMP Filter Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3020?
The severity of CVE-2008-3020 is considered critical due to its potential to allow remote code execution.
How do I fix CVE-2008-3020?
To fix CVE-2008-3020, users should apply the latest security patches provided by Microsoft for affected Office and Works versions.
Which versions of Microsoft Office are affected by CVE-2008-3020?
CVE-2008-3020 affects Microsoft Office 2000 SP3, Office XP SP3, and other related versions.
What kind of attack does CVE-2008-3020 enable?
CVE-2008-3020 enables remote attackers to execute arbitrary code through a crafted BMP file.
Is Microsoft Works 8 impacted by CVE-2008-3020?
Yes, Microsoft Works 8 is also impacted by CVE-2008-3020, making it vulnerable to exploitation.