HTTP: Microsoft Office Works File Converter WPS File Field Length Stack Overflow

This signature detects attempts to exploit a known vulnerability in Microsoft Office. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the process' user.

Extended Description

Microsoft Works File Converter is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input. An attacker could exploit this issue by enticing a victim to open a malicious '.wps' file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

Affected Products

Microsoft office_2003

References

BugTraq: 27658 27659

CVE: CVE-2008-0105

URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=660 http://www.iss.net/threats/287.html

Short Name

HTTP:STC:DL:WORKS-WPS-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Office Works File Converter WPS File Field Length Stack Overflow

Extended Description

Affected Products

References

Found a potential security threat?