CVE-2007-0216

wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation Vulnerability."

Affected products

Works, Office 2003 Sp2, Works Suite 2005

Microsoft Office

= 2003

Microsoft Works

= 8.0, 2005

CVSS 2.0

9.3 HIGH

EPSS

38.1% (98th percentile)

Weakness

CWE-20

NVD status

Modified

Published

2008-02-12