CVE-2008-0108

CVE-2008-0108 describes a stack-based buffer overflow in the wkcvqd01.dll component of Microsoft Works 6 File Converter, impacting Microsoft Office 2003, Works 8.0, and Works Suite 2005. This vulnerability allows remote attackers to execute arbitrary code by crafting malicious .wps files with specific field lengths. With a CVSS score of 9.3 (Critical), it presents a high risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB, indicating a potential for exploitation, though there is minimal community discussion or media coverage.