CVE-2009-0235

The CVE-2009-0235 entry covers a stack-based buffer overflow in WordPad’s Word 97 text converter used to open Word 97 files on Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP1/SP2. The root cause is a mismatch between a 32-bit length value from the file and the lower 16 bits used during a copy, ...

MS09-010: Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)

The remote host contains a version of the Microsoft WordPad and/or Microsoft Office text converters that could allow remote code execution if a specially crafted file is opened. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid36148; scriptversion"1.33";...

Microsoft Word 6 and Windows Write Converters Memory Corruption (MS09-010; CVE-2009-0087)

Office Text Converters are a default component of Microsoft Office that allow users to open and save files as older Office file formats. WordPad Text Converters allow users who do not have Microsoft Office Word installed to open documents in other Microsoft Windows applications. They also allow...

Microsoft Security Bulletin MS09-010 - Critical Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)

Microsoft Security Bulletin MS09-010 - Critical Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution 960477 Published: April 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves two publicly disclosed vulnerabilities and two...

Microsoft WordPad Word 97 Text Converter List Structure Stack Overflow (MS09-010; CVE-2008-4841)

WordPad Text Converters allow users who do not have Microsoft Office Word installed to open documents in other Microsoft Windows applications. They also allow users to save documents in the Word 97 file format. The vulnerability is due to a memory corruption error when a user opens a specially...

Microsoft WordPad Word 97 Text Converter Text Location Stack Overflow (MS09-010; CVE-2009-0235)

WordPad Text Converters allow users who do not have Microsoft Office Word installed to open documents in other Microsoft Windows applications. They also allow users to save documents in the Word 97 file format. The vulnerability is due to a memory corruption error when a user opens a specially...

MS09-010: Description of the update for Windows WordPad Converter: April 14, 2009

None None...

Microsoft WordPad Word 97 Converter Remote Code Execution Vulnerability

Description Microsoft WordPad is prone to a remote code-execution vulnerability because of a stack-based buffer overflow that may result in corrupted memory. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts...

Windows/x86 (XP Professional SP2) (English) - Wordpad.exe Shellcode (15 bytes)

Windows/x86 XP Professional SP2 English - Wordpad.exe Shellcode 15 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF +-------------------------------------------------+ | Windows XP Pro Sp2 English "Wordpad" Shellcode. |...

WordPad and Office Text Converter Memory Corruption Vulnerability (960477)

This host is missing a critical security update according to Microsoft Bulletin MS09-010. OpenVAS Vulnerability Test $Id: secpodmswordpadmultvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ WordPad and Office Text Converter Memory Corruption Vulnerability 960477 Authors: Chandan S Update description and...

Microsoft WordPad Text Converter vulnerable to remote code execution

Overview The WordPad Text Converter for Word 97 files included in some versions of Windows contains an unspecified error which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft WordPad is a text editor included by default with the...

CVE-2008-4841

The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: ...

Memory corruption

The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: ...

CVE-2008-4841

CVE-2008-4841 corresponds to a memory corruption flaw in the WordPad/Text Converter used by Windows Word 97 file handling. The vulnerability affects WordPad and Office Text Converters when processing (1) .doc, (2) .wri, or (3) .rtf) files, enabling remote code execution on affected Windows platfo...

CVE-2008-4841

The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: ...

VulnCheck KEV: CVE-2008-4841

The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008...

Microsoft WordPad Text Converter Remote Code Execution Vulnerability

Description Microsoft WordPad is prone to a remote code-execution vulnerability because of an unspecified error that may result in corrupted memory. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may resu...

Microsoft WordPad '.doc'文件远程拒绝服务漏洞

BUGTRAQ ID: 31399 CNCAN ID：CNCAN-2008092608 Microsoft WordPad是一款微软开发的写字板程序。 Microsoft WordPad处理特殊构建的.doc文件存在问题，远程攻击者可以利用漏洞使应用程序崩溃。 目前还不确定是否能以任意代码执行方式利用。 0 Microsoft WordPad 目前没有解决方案提供： a href=http://www.microsoft.com target=blankhttp://www.microsoft.com/a 可参考如下测试程序：...

MS Windows Wordpad .doc File Local Denial of Service PoC

No description provided by source. MS Windows Wordpad .doc File Local Denial of Service PoC author: securfrog http://milw0rm.com/sploits/2008-crash.doc.rar...

MS Windows Wordpad .doc File Local Denial of Service PoC

Exploit for unknown platform in category dos / poc ======================================================== MS Windows Wordpad .doc File Local Denial of Service PoC ======================================================== MS Windows Wordpad .doc File Local Denial of Service PoC author: securfrog...