CVE

Id
33577  
CVE No.
CVE-2008-3460  
Status
Candidate  
Description
WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics (WPG) file, which allows remote attackers to execute arbitrary code via a crafted WPG file, aka the "WPG Image File Heap Corruption Vulnerability."  
Phase
Assigned (20080804)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
365555 33577 CVE-2008-3460 IDEFENSE:20080812 Microsoft Office WPG Image File Heap Buffer Overflow Vulnerability  View
365556 33577 CVE-2008-3460 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=737  View
365557 33577 CVE-2008-3460 HP:HPSBST02360  View
365558 33577 CVE-2008-3460 URL:http://marc.info/?l=bugtraq&m=121915960406986&w=2  View
365559 33577 CVE-2008-3460 HP:SSRT080117  View
365560 33577 CVE-2008-3460 URL:http://marc.info/?l=bugtraq&m=121915960406986&w=2  View
365561 33577 CVE-2008-3460 MS:MS08-044  View
365562 33577 CVE-2008-3460 URL:http://www.microsoft.com/technet/security/Bulletin/MS08-044.mspx  View
365563 33577 CVE-2008-3460 CERT:TA08-225A  View
365564 33577 CVE-2008-3460 URL:http://www.us-cert.gov/cas/techalerts/TA08-225A.html  View
365565 33577 CVE-2008-3460 BID:30600  View
365566 33577 CVE-2008-3460 URL:http://www.securityfocus.com/bid/30600  View
365567 33577 CVE-2008-3460 OVAL:oval:org.mitre.oval:def:6019  View
365568 33577 CVE-2008-3460 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6019  View
365569 33577 CVE-2008-3460 VUPEN:ADV-2008-2348  View
365570 33577 CVE-2008-3460 URL:http://www.vupen.com/english/advisories/2008/2348  View
365571 33577 CVE-2008-3460 SECTRACK:1020673  View
365572 33577 CVE-2008-3460 URL:http://www.securitytracker.com/id?1020673  View
365573 33577 CVE-2008-3460 SECUNIA:31336  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46556 JVNDB-2008-001866 Microsoft Windows の AFD コンポーネントにおける入力検証不備による権限昇格の脆弱性 Microsoft Windows の Ancillary Function Driver (AFD) コンポーネントに実装されている afd.sys には、ユーザモードから Kernel に送られた入力が正しく検証されないため、権限昇格の脆弱性が存在します。 CVE-2008-3464 33577 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001866.html  View