Microsoft Office Converter Pack vulnerabilities

15 CVEs affecting Microsoft Office Converter Pack, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-3952, published 2010-12-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-3021, published 2008-08-12. High severity, CVSS 9.3. EPSS: 35.9% chance of exploitation in the next 30 days. Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a…
CVE-2008-3460, published 2008-08-12. High severity, CVSS 9.3. EPSS: 32.2% chance of exploitation in the next 30 days. WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics (WPG) file, which allows remote…
CVE-2009-2506, published 2009-12-09. High severity, CVSS 9.3. EPSS: 31.2% chance of exploitation in the next 30 days. Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows…
CVE-2008-3020, published 2008-08-12. High severity, CVSS 9.3. EPSS: 30.3% chance of exploitation in the next 30 days. Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP…
CVE-2008-3018, published 2008-08-12. High severity, CVSS 9.3. EPSS: 30.3% chance of exploitation in the next 30 days. Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a…
CVE-2008-3019, published 2008-08-12. High severity, CVSS 9.3. EPSS: 30.1% chance of exploitation in the next 30 days. Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript (EPS) file, which allows remote attackers to execute…
CVE-2010-3947, published 2010-12-16. High severity, CVSS 9.3. EPSS: 28.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a…
CVE-2009-0088, published 2009-04-15. High severity, CVSS 9.3. EPSS: 28.4% chance of exploitation in the next 30 days. The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which…
CVE-2010-3951, published 2010-12-16. High severity, CVSS 9.3. EPSS: 24.7% chance of exploitation in the next 30 days. Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted FlashPix…
CVE-2010-3949, published 2010-12-16. High severity, CVSS 9.3. EPSS: 24.7% chance of exploitation in the next 30 days. Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted TIFF image in…

Latest

CVE-2010-3952, published 2010-12-16. High severity, CVSS 9.3. EPSS: 20.5% chance of exploitation in the next 30 days. The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service (heap memory…
CVE-2010-3950, published 2010-12-16. High severity, CVSS 9.3. EPSS: 20.5% chance of exploitation in the next 30 days. The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code…
CVE-2010-3946, published 2010-12-16. High severity, CVSS 9.3. EPSS: 21.2% chance of exploitation in the next 30 days. Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a…
CVE-2010-3945, published 2010-12-16. High severity, CVSS 9.3. EPSS: 24.7% chance of exploitation in the next 30 days. Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a…