Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-0088
HistoryApr 15, 2009 - 8:00 a.m.

CVE-2009-0088

2009-04-1508:00:00
CWE-20
[email protected]
web.nvd.nist.gov
2

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.27 Low

EPSS

Percentile

96.8%

JSON

The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka โ€œWord 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability.โ€

Affected configurations

NVD
Node
microsoftoffice_converter_packMatch2003
OR
microsoftoffice_wordMatch2000sp3
OR
microsoftoffice_wordMatch2002sp3
AND
microsoftwindows_2000sp4
OR
microsoftwindows_server_2003
OR
microsoftwindows_server_2003sp1
OR
microsoftwindows_server_2003sp1itanium
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_xppro_x64
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp2pro_x64
OR
microsoftwindows_xpsp3

Related

checkpoint_advisories 1
seebug 1
securityvulns 3
prion 1
cvelist 1
cve 1
nessus 1
openvas 2
checkpoint_advisories
checkpoint_advisories
Microsoft Word 2000 WordPerfect Converter Stack Corruption (MS09-010; CVE-2009-0088)
2009-05-17 00:00:00
seebug
seebug
Microsoft Word 2000 WordPerfect่ฝฌๆขๅ™จๆ ˆๆบขๅ‡บๆผๆดž๏ผˆMS09-010๏ผ‰
2009-04-16 00:00:00
securityvulns
securityvulns
iDefense Security Advisory 04.14.09: Microsoft Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability
2009-04-14 00:00:00
Microsoft Wordpad / Microsoft Works multiple security vulnerabilities
2009-06-10 00:00:00
Microsoft Security Bulletin MS09-010 - Critical Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)
2009-04-14 00:00:00
prion
prion
Memory corruption
2009-04-15 08:00:00
cvelist
cvelist
CVE-2009-0088
2009-04-15 03:49:00
cve
cve
CVE-2009-0088
2009-04-15 08:00:00
nessus
nessus
MS09-010: Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)
2009-04-15 00:00:00
openvas
openvas
WordPad and Office Text Converter Memory Corruption Vulnerability (960477)
2008-12-12 00:00:00
WordPad and Office Text Converter Memory Corruption Vulnerability (960477)
2008-12-12 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.27 Low

EPSS

Percentile

96.8%

JSON
Related for NVD:CVE-2009-0088
checkpoint_advisories1seebug1securityvulns3prion1cvelist1cve1nessus1openvas2