Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file which allows remote attackers to execute arbitrary code via a crafted BMP file aka the \Malformed BMP Filter Vulnerability.\