PT-2008-4862 · Microsoft · Office Xp+6

Damian Put · Published 2008-08-12 · Updated 2018-10-12 · CVE-2008-3460

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office 2000 SP3 Microsoft Office XP SP3 Microsoft Office 2003 SP2 Office Converter Pack Works 8

Description A remote code execution issue exists in the way Microsoft Office handles WordPerfect Graphics (WPG) format image files. This could be exploited when Microsoft Office opens a specially crafted WPG-format image file or a WordPerfect document file with a malformed WPG image embedded. Such files might be included as e-mail attachments or hosted on malicious Web sites. An attacker who successfully exploits this issue could take complete control of an affected system, but significant user interaction is required.

Recommendations For Microsoft Office 2000 SP3, update to a version that includes the fix for this issue. For Microsoft Office XP SP3, update to a version that includes the fix for this issue. For Microsoft Office 2003 SP2, update to a version that includes the fix for this issue. For Office Converter Pack, update to a version that includes the fix for this issue. For Works 8, update to a version that includes the fix for this issue. As a temporary workaround, consider avoiding the use of WPG files in Microsoft Office until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-3460

Affected Products

Office 2000

Office 2003

Office Xp

Office

Office Converter Pack

Office Project

Works 8

References · 12

• http://secunia.com/advisories/31336 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3460 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3460 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=121915960406986&w=2 · Vendor Advisory
• http://vupen.com/english/advisories/2008/2348 · Vendor Advisory
• http://securityfocus.com/bid/30600 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=737 · Note
• http://us-cert.gov/cas/techalerts/TA08-225A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-044 · Note
• http://securitytracker.com/id?1020673 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6019 · Note