Microsoft Internet Explorer Works WkImgSrv.dll ActiveX Denial Of Sevice

  Severity: CRITICAL
  CVE Identifier: CVE-2008-1898
  Advisory Date: JUL 21, 2015

  DESCRIPTION

A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1002463
  Trend Micro Deep Security DPI Rule Name: 1002463 - Microsoft Internet Explorer Works WkImgSrv.dll ActiveX Denial Of Service

  AFFECTED SOFTWARE AND VERSION

  • Microsoft Works 7.0
  • Microsoft Office 2007
  • Microsoft Office 2003