Microsoft · Works · CVE-2008-0108
**Name of the Vulnerable Software and Affected Versions**
Microsoft Works versions prior to the fixed version
**Description**
The issue is related to a stack-based buffer overflow in the wkcvqd01.dll file, which is used in various Microsoft products. This overflow can be triggered by a .wps file with crafted field lengths, allowing remote attackers to execute arbitrary code.
**Recommendations**
For Microsoft Works versions prior to the fixed version, update to the fixed version to resolve the issue. As a temporary workaround, consider avoiding the use of .wps files with crafted field lengths until a patch is available. Restrict access to the wkcvqd01.dll file to minimize the risk of exploitation.