CVE-2008-3460

WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect…

published August 12, 2008

CVSS
—
EPSS
32%
Percentile
98.3
In the wild
Unconfirmed
What it is

⚠️ A crafty WPG file could lead to arbitrary code execution on Microsoft Office — an unexpected guest crashing your party! 🎉 Think of it like someone slipping a dangerous ingredient into a dish at a potluck dinner. If nobody checks the food before serving, it could lead to a catastrophic meal for everyone involved! If exploited, an attacker could execute arbitrary code on the affected system, potentially taking control of it and accessing sensitive information or causing damage. This vulnerability gives them a way in, allowing all sorts of mischief!

Put simply

Think of it like someone slipping a dangerous ingredient into a dish at a potluck dinner. If nobody checks the food before serving, it could lead to a catastrophic meal for everyone involved! This vulnerability arises from improper parsing of the length of a WordPerfect Graphics (WPG) file by the WPGIMP32.FLT filter, which can lead to heap corruption, allowing attackers to execute their own code.

What to do

If exploited, an attacker could execute arbitrary code on the affected system, potentially taking control of it and accessing sensitive information or causing damage. This vulnerability gives them a way in, allowing all sorts of mischief! To protect your systems, ensure that Microsoft Office 2000, XP, and 2003 are updated to the latest security patches. If you are still using these older versions, consider upgrading to a more recent, supported version of Office. You've got this! Stay vigilant and keep your software updated to keep those digital dangers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.32172 · 98.3th percentile
Published
2008-08-12T23:00Z
EPSS history
Timeline
  • 12 AUG 23:00Z
    WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect…
    cvelistv5