CVE-2004-0571 Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malic...
HighCVSS 10.0
EPSS 30.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows 98 | All versions | No fix listed |
| Microsoft windows 98se | All versions | No fix listed |
| Microsoft windows me | All versions | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- MS04-041 vendor-advisory
- win-converter-table-code-execution(18337) vdb-entry
- oval:org.mitre.oval:def:1168 signature vdb-entry
- oval:org.mitre.oval:def:1417 signature vdb-entry
- oval:org.mitre.oval:def:1959 signature vdb-entry
- oval:org.mitre.oval:def:1976 signature vdb-entry
- oval:org.mitre.oval:def:3416 signature vdb-entry
- oval:org.mitre.oval:def:3743 signature vdb-entry
- oval:org.mitre.oval:def:4328 signature vdb-entry
- oval:org.mitre.oval:def:685 signature vdb-entry