CVE-2008-3018 in Officeinfo

Summary

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file, aka the "Malformed PICT Filter Vulnerability," a different vulnerability than CVE-2008-3021.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

07/07/2008

Disclosure

08/12/2008

Entries

VDB-3796 (2)

CPE

ready

CVSS

7.3

EPSS

0.50102

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!