What is an XPR file?
An XPR file is a vector image file created with the now-discontinued Microsoft Expression Graphics (EGD) software. It contains graphics information that can used as user interface mockup. XPR files were later replaced by .design files in Microsoft Expression Design. XPR files could be opened with Microsoft Expression Studio that has been discontinued for quite some time now.
XPR File Format Vulnerability
XPR files were identified to benefit a vulnerability in Microsoft Expression Design, leading to allow execution of remote code. In the reported issue, if a user opened a legitimate .xpr file that is lcoated in the network directory along with dynamic link library (DLL) file, Microsoft Expression Design could attempt to load the DLL file and execute the code it contained. This was later fixed by Microsoft in a security update.
