PT-2008-1763 · Microsoft · Works

Chujwamwdupe · Publicado 2008-02-12 · Atualizado 2018-10-12 · CVE-2008-0108

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Works versions prior to the fixed version

Description The issue is related to a stack-based buffer overflow in the wkcvqd01.dll file, which is used in various Microsoft products. This overflow can be triggered by a .wps file with crafted field lengths, allowing remote attackers to execute arbitrary code.

Recommendations For Microsoft Works versions prior to the fixed version, update to the fixed version to resolve the issue. As a temporary workaround, consider avoiding the use of .wps files with crafted field lengths until a patch is available. Restrict access to the wkcvqd01.dll file to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-0108

Produtos afetados

Works

Referências · 12

• 🔥 https://exploit-db.com/exploits/5107 · Exploit
• 🔥 https://exploit-db.com/exploits/31118 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0108 · Nota de Segurança
• http://securitytracker.com/id?1019388 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5202 · Nota
• http://secunia.com/advisories/28904 · Aviso do Fabricante
• http://securityfocus.com/bid/27659 · Nota
• http://marc.info/?l=bugtraq&m=120361015026386&w=2 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA08-043C.html · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=660 · Nota
• http://vupen.com/english/advisories/2008/0513/references · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011 · Aviso do Fabricante