CVE:CVE-2008-3021
CNNVD:CNNVD-200808-173
Microsoft Office是非常流行的办公软件套件。
多个版本的Office(2000 SP3, XP SP3,2003 SP2; Office Converter Pack; and Works 8)存在远程代码执行漏洞。
Office的WPGIMP32.FLT模块没有正确地处理oPICT图形，攻击者通过构造一个包含无效bits_per_pixel字段的PICT图形文件，就可能触发溢出，导致执行任意代码。
solution:Upgrade microsoft office to a higher version than 2000:sp3,2003:sp2,xp:sp3,and avoid the version 2000:sp3,2003:sp2,xp:sp3; Upgrade microsoft office_converter_pack to a higher version than *; Upgrade microsoft works to a higher version than 8.0,and avoid the version 8.0