Vulnerabilities > Microsoft > Works > 7.0

DATE CVE VULNERABILITY TITLE RISK
2008-04-21 CVE-2008-1898 Improper Input Validation vulnerability in Microsoft Office and Works
A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.
network
microsoft CWE-20
critical
9.3