AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-3460

HIGH · CVSS 9.3 EPSS 32.17%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-08-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2008-3460
Severity
HIGH
CVSS
9.3
EPSS
32.17%
Microsoft Office

Original NVD Description

WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics (WPG) file, which allows remote attackers to execute arbitrary code via a crafted WPG file, aka the "WPG Image File Heap Corruption Vulnerability."