QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-3020

Back to search

CVE-2008-3020

Published: Aug 12, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP file, aka the "Malformed BMP Filter Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

MS08-044
vendor-advisory
x_refsource_MS
TA08-225A
third-party-advisory
x_refsource_CERT
HPSBST02360
vendor-advisory
x_refsource_HP
1020673
vdb-entry
x_refsource_SECTRACK
SSRT080117
vendor-advisory
x_refsource_HP
ADV-2008-2348
vdb-entry
x_refsource_VUPEN
31336
third-party-advisory
x_refsource_SECUNIA
30599
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:5868
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now