CVE:CVE-2008-3020
CNNVD:CNNVD-200808-172
Microsoft Office是非常流行的办公软件套件。
多个版本的Office(2000 SP3、XP SP3、Office Converter Pack、Works 8)存在代码执行漏洞。Office没有正确解析BMP文件长度，攻击者可通过构造特殊的BMP文件，触发溢出，执行任意指令。
solution:Upgrade microsoft office to a higher version than 2000:sp3,2003:sp2,xp:sp3,and avoid the version 2000:sp3,2003:sp2,xp:sp3; Upgrade microsoft office_converter_pack to a higher version than *; Upgrade microsoft works to a higher version than 8.0,and avoid the version 8.0