iDefense Security Advisory 08.12.08 – Remote exploitation of a buffer overflow vulnerability in Microsoft Corp.’s Office filter for WordPerfect Graphics Files, could allow an attacker to execute arbitrary code with the privileges of the victim. This vulnerability specifically lies within the “WPGIMP32.FLT” module. A heap overflow can occur when processing a malformed Wordperfect Graphics (WPG) file. By corrupting heap memory, it is possible to execute arbitrary code. iDefense has confirmed this vulnerability in the following versions of Microsoft Office; Office XP SP3, Office 2003 SP2, Office 97. Other versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/69048/08.12.08-2.txt
Source: https://packetstormsecurity.com/files/69048/iDEFENSE-Security-Advisory-2008-08-12.2.html