MS.Office.BMP.Filter.Code.Execution

Release Date Feb 09, 2011
Severity critical
Impact System compromise
Description This indicates a possible attack against a heap-overflow vulnerability in Microsoft office products. The vulnerability is due to vulnerable software's inability to properly parse the length of a BMP file. An attacker may exploit this to execute arbitrary code.
Affected Products Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8
Recommended Actions Apply the patch, available at the vendor's website: http://www.microsoft.com/technet/security/Bulletin/MS08-044.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2008-3020 CVE-2006-4841
Reference/s http://technet.microsoft.com/en-us/security/bulletin/ms08-044.mspx (MS-ID)

Fortinet