CVE-2009-2506

🗓️ 09 Dec 2009 18:00:00Reported by microsoftType

CVE-2009-2506 Integer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a DOC file with an invalid number of property names in the DocumentSummaryInformation stream

Reporter	Title	Published	Views	Family All 11
Check Point Advisories	Microsoft WordPad and Office Text Converter Memory Corruption (MS09-073; CVE-2009-2506)	8 Dec 200900:00	–	checkpoint_advisories
Cvelist	CVE-2009-2506	9 Dec 200918:00	–	cvelist
NVD	CVE-2009-2506	9 Dec 200918:30	–	nvd
OpenVAS	WordPad and Office Text Converters Remote Code Execution Vulnerability (975539)	9 Dec 200900:00	–	openvas
OpenVAS	WordPad and Office Text Converters Remote Code Execution Vulnerability (975539)	9 Dec 200900:00	–	openvas
Prion	Integer overflow	9 Dec 200918:30	–	prion
securityvulns	Microsoft Security Bulletin MS09-073 - Important Vulnerability in WordPad and Office Text Converters Could Allow Remote Code Execution (975539)	9 Dec 200900:00	–	securityvulns
securityvulns	iDefense Security Advisory 12.08.09: Microsoft WordPad Word97 Converter Integer Overflow Vulnerability	10 Dec 200900:00	–	securityvulns
securityvulns	Microsoft Wordpad / Office Text Converters memory corruption	10 Dec 200900:00	–	securityvulns
Tenable Nessus	MS09-073: Vulnerability in WordPad and Office Text Converters Could Allow Remote Code Execution (975539)	8 Dec 200900:00	–	nessus

NVD

Node

microsoft windows_2000sp4

microsoft windows_server_2003sp2

microsoft windows_xpsp2

microsoft windows_xpsp2x64

microsoft windows_xpsp3

AND

microsoft office_converter_pack

microsoft office_wordMatch2002sp3

microsoft office_wordMatch2003sp3

microsoft wordpad

microsoft worksMatch8.5

Source	Link
labs	www.labs.idefense.com/intelligence/vulnerabilities/display.php
securityfocus	www.securityfocus.com/bid/37216
us-cert	www.us-cert.gov/cas/techalerts/TA09-342A.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5846
support	www.support.avaya.com/css/P8/documents/100070184
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-073