MS.Office.Filters.PICT.File.Format.Heap

NameMS.Office.Filters.PICT.File.Format.Heap.Overflow
Release DateAug 15, 2008
SeverityCritical
ImpactSystem Compromise: Remote attackers can gain control of vulnerable systems.
DescriptionThis indicates an attack attempt against a buffer overflow vulnerability in Microsoft Office Filters.

The vulnerability is caused by an error that occurs when the vulnerable software handles a malicious Apple PICT / QuickDraw image file. It allows a remote attacker to execute arbitrary code by luring the victim to import the file in Office documents.
Affected ProductsMicrosoft Office 2000 Service Pack 3
Microsoft Office XP Service Pack 3
Microsoft Office 2003 Service Pack 2
Microsoft Office Project 2002 Service Pack 1
Microsoft Office Converter Pack
Microsoft Works 8
Recommended ActionsApply the latest update from the vendor.
Common Vulnerabilities and Exposures (CVE)http://cve.mitre.org/cgi-bin/cvename.cgi?name=2006-5992
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-3021
Microsoft Bulletin IDMS08-044   http://www.microsoft.com/technet/security/Bulletin/ms08-044.mspx
Reference/shttp://www.securityfocus.com/bid/30598 (BugTraq)
http://developer.apple.com/documentation/Carbon/Reference/QuickDraw_Ref/Reference/reference.html
Reference: VID-15789