Description
Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.
References
- oval:org.mitre.oval:def:4076 vdb-entry signature
- oval:org.mitre.oval:def:4576 vdb-entry signature
- P-055 third-party-advisory government-resource
- oval:org.mitre.oval:def:3882 vdb-entry signature
- oval:org.mitre.oval:def:1241 vdb-entry signature
- oval:org.mitre.oval:def:539 vdb-entry signature
- oval:org.mitre.oval:def:1655 vdb-entry signature
- MS04-041 vendor-advisory
- 20041214 Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability third-party-advisory
- win-converter-font-code-execution(18338) vdb-entry
- oval:org.mitre.oval:def:4749 vdb-entry signature
- oval:org.mitre.oval:def:3310 vdb-entry signature