PT-2008-4450 · Microsoft · Office Converter Pack+3

Published 2008-08-12 · Updated 2018-10-12 · CVE-2008-3021

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2000 SP3, XP SP3, and 2003 SP2 Office Converter Pack (affected versions not specified) Works version 8

Description A remote code execution issue exists in the way Microsoft Office handles PICT-format image files. This could be exploited when a Microsoft Office application opens a specially crafted PICT-format image file, potentially included as an e-mail attachment or hosted on a malicious Web site. An attacker who successfully exploits this issue could take complete control of an affected system, but significant user interaction is required.

Recommendations For Microsoft Office versions 2000 SP3, XP SP3, and 2003 SP2, update to a version that properly parses the length of a PICT file to prevent remote code execution. For Office Converter Pack, ensure that any PICT files are thoroughly validated before processing to minimize the risk of exploitation. For Works version 8, avoid opening specially crafted PICT-format image files until a fix is available.

Fix

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-3021

Affected Products

Office

Office Converter Pack

Office Project

Works

References · 13

• http://secunia.com/advisories/31336 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3021 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=121915960406986&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3021 · Security Note
• http://vupen.com/english/advisories/2008/2348 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA08-225A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-044 · Note
• http://securitytracker.com/id?1020673 · Note
• http://securityfocus.com/archive/1/495429/100/0/threaded · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5997 · Note
• http://zerodayinitiative.com/advisories/ZDI-08-049 · Note
• http://securityfocus.com/bid/30598 · Note