← Database

CVE-2008-1898

CRITICAL CVSS: 9.3 Published: 2008-04-21 Modified: 2026-06-16

Description

A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.

Affected Platforms

Microsoft OfficeMicrosoft Works

Weakness Type

CWE-20

References