WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics (WPG) file, which allows remote attackers to execute arbitrary code via a crafted WPG file, aka the WPG Image File Heap Corruption Vulnerability.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Office | Microsoft | 2000-sp3 (including) | 2000-sp3 (including) |
| Office | Microsoft | 2003-sp2 (including) | 2003-sp2 (including) |
| Office | Microsoft | xp-sp3 (including) | xp-sp3 (including) |
| Office_converter_pack | Microsoft | * | * |
| Works | Microsoft | 8.0 (including) | 8.0 (including) |