CVE-2004-0901 Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf,....
HighCVSS 10.0
EPSS 31.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows 98 | All versions | No fix listed |
| Microsoft windows 98se | All versions | No fix listed |
| Microsoft windows me | All versions | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- P-055 government-resource third-party-advisory
- 20041214 Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability third-party-advisory
- MS04-041 vendor-advisory
- win-converter-font-code-execution(18338) vdb-entry
- oval:org.mitre.oval:def:1241 signature vdb-entry
- oval:org.mitre.oval:def:1655 signature vdb-entry
- oval:org.mitre.oval:def:3310 signature vdb-entry
- oval:org.mitre.oval:def:3882 signature vdb-entry
- oval:org.mitre.oval:def:4076 signature vdb-entry
- oval:org.mitre.oval:def:4576 signature vdb-entry
- oval:org.mitre.oval:def:4749 signature vdb-entry
- oval:org.mitre.oval:def:539 signature vdb-entry