<< Back
CVE Number Vulnerability Product Severity Date
MS08-044 Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (924090) Microsoft Office Critical 13-08-2008

Technical Information

Brief overview of the risk:
A remote code execution vulnerability exists in the way that a Microsoft Office filter handles a malformed graphics image. An attacker could exploit the vulnerability by constructing a specially crafted Encapsulated PostScript (EPS) file that could allow remote code execution if a user opened the file with a Microsoft Office application. Such a specially crafted file might be included as an e-mail attachment, or hosted on a malicious or compromised Web site.
Detailed Information on the risk:
This security update resolves five privately reported vulnerabilities. These vulnerabilities could allow remote code execution if a user viewed a specially crafted image file using Microsoft Office. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.Further information on this exploit is available at : MS08-044

Affected Software

Microsoft Office 2000 Service Pack 3
Microsoft Office 2003 Service Pack 2
Microsoft Office Converter Pack
Microsoft Office Project 2002 Service Pack 1
Microsoft Office XP Service Pack 3
Microsoft Works 8.0