CVE

Id
32015  
CVE No.
CVE-2008-1898  
Status
Candidate  
Description
A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.  
Phase
Assigned (20080421)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
345372 32015 CVE-2008-1898 BUGTRAQ:20080417 Microsoft Works 7 WkImgSrv.dll crash POC  View
345373 32015 CVE-2008-1898 URL:http://www.securityfocus.com/archive/1/archive/1/491027/100/0/threaded  View
345374 32015 CVE-2008-1898 FULLDISC:20080502 Microsoft Work ActiveX Insecure Method Exploit  View
345375 32015 CVE-2008-1898 URL:http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0029.html  View
345376 32015 CVE-2008-1898 MILW0RM:5460  View
345377 32015 CVE-2008-1898 URL:http://www.milw0rm.com/exploits/5460  View
345378 32015 CVE-2008-1898 MILW0RM:5530  View
345379 32015 CVE-2008-1898 URL:http://www.milw0rm.com/exploits/5530  View
345380 32015 CVE-2008-1898 MISC:http://blogs.technet.com/swi/archive/2008/06/05/why-there-wont-be-a-security-update-for-wkimgsrv-dll.aspx  View
345381 32015 CVE-2008-1898 BID:28820  View
345382 32015 CVE-2008-1898 URL:http://www.securityfocus.com/bid/28820  View
345383 32015 CVE-2008-1898 XF:microsoft-works-wkimgsrv-dos(41876)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47663 JVNDB-2008-002973 aptlinex の GUI におけるパッケージを削除される脆弱性 aptlinex の GUI には、潜在的に危険な操作をユーザに十分な警告をしないため、パッケージを削除または変更される脆弱性が存在します。 CVE-2008-1902 32015 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002973.html  View