VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 12, 2008· Updated Jun 16, 2026

CVE-2008-3020

CVE-2008-3020

Description

Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP file, aka the "Malformed BMP Filter Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Microsoft/Office3 versions
    cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
  • Microsoft/Office Converter Pack2 versions
    cpe:2.3:a:microsoft:office_converter_pack:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office_converter_pack:*:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Works2 versions
    cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*
    • (no CPE)range: 8
  • Microsoft/Office Xpllm-fuzzy
    Range: SP3
  • Microsoft/Office 2000llm-fuzzy
    Range: SP3

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.