exploits , vulnerabilities , articles , Microsoft Works File Converter Section Length Header Remote Heap Overflow Vulnerability

Title	Microsoft Works File Converter Section Length Header Remote Heap Overflow Vulnerability
Published	2008-02-12-12:00AM
Updated	2008-02-14-10:15PM
Class	Boundary Condition Error
CVE	CVE-2007-0216
Remote	Yes
Local	No
Credit	Damian Put working with VeriSign iDefense VCP is credited with the discovery of this issue.
Vulnerable	Microsoft Works Suite 2005 0 Microsoft Works 8.0 Microsoft Office 2003 SP3 Microsoft Office 2003 SP2
Not Vulnerable	Microsoft Works Suite 2006 0 Microsoft Works 9.0 Microsoft Works 8.5 Microsoft Office XP SP3 Microsoft Excel 2002 SP3 Microsoft Excel 2002 SP3 Microsoft FrontPage 2002 SP3 Microsoft FrontPage 2002 SP3 Microsoft Outlook 2002 SP3 Microsoft Outlook 2002 SP3 Microsoft PowerPoint 2002 SP3 Microsoft PowerPoint 2002 SP3 Microsoft Publisher 2002 SP3 Microsoft Publisher 2002 SP3 Microsoft Word 2002 SP3 Microsoft Word 2002 SP3 Microsoft Office XP SP2 -Microsoft Windows 2000 Professional SP3 -Microsoft Windows 2000 Professional SP2 -Microsoft Windows 2000 Professional SP1 -Microsoft Windows 2000 Professional -Microsoft Windows 98 -Microsoft Windows 98SE -Microsoft Windows ME -Microsoft Windows NT Workstation 4.0 SP6a -Microsoft Windows NT Workstation 4.0 SP6 -Microsoft Windows NT Workstation 4.0 SP5 -Microsoft Windows NT Workstation 4.0 SP4 -Microsoft Windows NT Workstation 4.0 SP3 -Microsoft Windows NT Workstation 4.0 SP2 -Microsoft Windows NT Workstation 4.0 SP1 -Microsoft Windows NT Workstation 4.0 -Microsoft Windows XP Home SP1 -Microsoft Windows XP Home -Microsoft Windows XP Professional SP1 -Microsoft Windows XP Professional Microsoft Office XP SP1 -Microsoft Windows 2000 Professional SP2 -Microsoft Windows 2000 Professional SP1 -Microsoft Windows 2000 Professional -Microsoft Windows 98 -Microsoft Windows ME -Microsoft Windows NT Workstation 4.0 SP6a -Microsoft Windows NT Workstation 4.0 SP6 -Microsoft Windows NT Workstation 4.0 SP5 -Microsoft Windows NT Workstation 4.0 SP4 -Microsoft Windows NT Workstation 4.0 SP3 -Microsoft Windows NT Workstation 4.0 SP2 -Microsoft Windows NT Workstation 4.0 SP1 -Microsoft Windows NT Workstation 4.0 -Microsoft Windows XP Home -Microsoft Windows XP Professional Microsoft Office XP -Microsoft Windows 2000 Professional SP2 -Microsoft Windows 2000 Professional SP1 -Microsoft Windows 2000 Professional -Microsoft Windows 98 -Microsoft Windows ME -Microsoft Windows NT Workstation 4.0 SP6a -Microsoft Windows NT Workstation 4.0 SP6 -Microsoft Windows NT Workstation 4.0 SP5 -Microsoft Windows NT Workstation 4.0 SP4 -Microsoft Windows NT Workstation 4.0 SP3 -Microsoft Windows NT Workstation 4.0 SP2 -Microsoft Windows NT Workstation 4.0 SP1 -Microsoft Windows NT Workstation 4.0 -Microsoft Windows XP Home -Microsoft Windows XP Professional Microsoft Office 2007 0 Microsoft Access 2007 0 Microsoft Access 2007 0 Microsoft Excel 2003 Microsoft Excel 2007 0 Microsoft Excel 2007 0 Microsoft FrontPage 2003 Microsoft Groove 2007 0 Microsoft Groove 2007 0 Microsoft InfoPath 2003 Microsoft InfoPath 2007 0 Microsoft InfoPath 2007 0 Microsoft Office Communicator 2007 0 Microsoft Office Communicator 2007 0 Microsoft Office Word 2007 0 Microsoft Office Word 2007 0 Microsoft OneNote 2003 0 Microsoft Outlook 2003 0 Microsoft Outlook 2007 0 Microsoft Outlook 2007 0 Microsoft PowerPoint 2003 0 Microsoft PowerPoint 2007 0 Microsoft PowerPoint 2007 0 Microsoft Project Professional 2007 0 Microsoft Project Professional 2007 0 Microsoft Project Standard 2007 0 Microsoft Project Standard 2007 0 Microsoft Publisher 2003 Microsoft Publisher 2007 0 Microsoft Publisher 2007 0 Microsoft SharePoint Designer 2007 0 Microsoft SharePoint Designer 2007 0 Microsoft Visio Professional 2007 0 Microsoft Visio Professional 2007 0 Microsoft Visio Standard 2007 0 Microsoft Visio Standard 2007 0 Microsoft Word 2003 Microsoft Office 2000 SP3 -Microsoft Windows 2000 Professional SP3 -Microsoft Windows 2000 Professional SP2 -Microsoft Windows 2000 Professional SP1 -Microsoft Windows 2000 Professional -Microsoft Windows 98 -Microsoft Windows 98SE -Microsoft Windows ME -Microsoft Windows NT Workstation 4.0 SP6a -Microsoft Windows NT Workstation 4.0 SP6 -Microsoft Windows NT Workstation 4.0 SP5 -Microsoft Windows NT Workstation 4.0 SP4 -Microsoft Windows NT Workstation 4.0 SP3 -Microsoft Windows NT Workstation 4.0 SP2 -Microsoft Windows NT Workstation 4.0 SP1 -Microsoft Windows NT Workstation 4.0 -Microsoft Windows XP Home SP1 -Microsoft Windows XP Home -Microsoft Windows XP Professional SP1 -Microsoft Windows XP Professional Microsoft Office 2000 SP1 -Microsoft Windows 2000 Professional SP2 -Microsoft Windows 2000 Professional SP1 -Microsoft Windows 2000 Professional -Microsoft Windows ME -Microsoft Windows NT Workstation 4.0 SP6a -Microsoft Windows NT Workstation 4.0 SP6 -Microsoft Windows NT Workstation 4.0 SP5 -Microsoft Windows NT Workstation 4.0 SP4 -Microsoft Windows NT Workstation 4.0 SP3 -Microsoft Windows NT Workstation 4.0 SP2 -Microsoft Windows NT Workstation 4.0 SP1 -Microsoft Windows NT Workstation 4.0 -Microsoft Windows XP Home -Microsoft Windows XP Professional Microsoft Office 2000 -Microsoft Windows 2000 Professional SP2 -Microsoft Windows 2000 Professional SP1 -Microsoft Windows 2000 Professional -Microsoft Windows 95 -Microsoft Windows 98 -Microsoft Windows ME -Microsoft Windows NT Workstation 4.0 SP6a -Microsoft Windows NT Workstation 4.0 SP6 -Microsoft Windows NT Workstation 4.0 SP5 -Microsoft Windows NT Workstation 4.0 SP4 -Microsoft Windows NT Workstation 4.0 SP3 -Microsoft Windows NT Workstation 4.0 SP2 -Microsoft Windows NT Workstation 4.0 SP1 -Microsoft Windows NT Workstation 4.0 -Microsoft Windows XP Home -Microsoft Windows XP Professional Microsoft Internet Explorer for Unix SP2
Code	Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-02 xrdp Multiple Buffer Overflow Vulnerabilities
2008-12-02 FFmpeg Multiple Denial of Service Vulnerabilities
2008-12-01 SystemImager Flamethrower Insecure Temporary File Creation Vulnerabilities
2008-12-01 Rumpus FTP Server Command Argument Remote Buffer Overflow Vulnerability
2008-12-01 Rumpus FTP Server HTTP Command Remote Denial of Service Vulnerability
2008-11-29 Multiple ActiveWebSoftwares Products Login Parameters SQL Injection Vulnerabilities
2008-11-29 Venalsur Booking Centre Multiple Cross-Site Scripting Vulnerabilities
2008-11-28 ReVou Login SQL Injection Vulnerability
2008-11-28 Web Calendar System SQL Injection and Cross Site Scripting Vulnerabilities
2008-11-28 SailPlanner Login SQL Injection Vulnerability