| Package | Affected versions | Patched versions |
|---|---|---|
| office | = 2000= 2003= xp | |
| works | = 8.0 |
WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics (WPG) file, which allows remote attackers to execute arbitrary code via a crafted WPG file, aka the "WPG Image File Heap Corruption Vulnerability."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free