53662 : Microsoft WordPad / Office Text Converter Malformed Data Handling Memory Corruption
Printer | http://osvdb.org/53662 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
3	2780	over 2 years ago	about 1 year ago	6 times	35%

This Entry needs help! It is only 35% Complete. Click the edit link above to add more information.

Contributing is fast and easy, and benefits the entire security community.

Timeline

Disclosure Date
2009-04-14

Description

<em style='font-weight:bold;'>(Description Provided by <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-0087" target="_blank">CVE</a>)</em> : Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in Microsoft Office Word 2000 SP3 and 2002 SP3; allows remote attackers to execute arbitrary code via a crafted Word 6 file that contains malformed data, aka "WordPad and Office Text Converter Memory Corruption Vulnerability."

Classification

Location: Local / Remote, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Disclosure: Vendor Verified

Products

Unknown or Incomplete

References

CVE ID: 2009-0087 (see also: NVD)
Related OSVDB ID: 53663 53664
Microsoft Knowledge Base Article: 960477
News Article: http://gcn.com/articles/2009/04/15/microsoft-april-security-patch.aspx
http://www.eweek.com/c/a/Security/Micrsoft-Patch-Tuesday-Plugs-Security-Holes-as-Hackers-Circle-317813/
Microsoft Security Bulletin: MS09-010

Tools & Filters

	36148

Credit

Fortinet - Fortinet's FortiGuard Labs

CVSSv2 Score

CVSSv2 Base Score = 9.3
Source: nvd.nist.gov | Generated: 2009-04-15 | Disagree?

Blogs

This product uses the Daylife API but is not endorsed or certified by Daylife.

This section lists the latest news and blogs found via the daylife API (and for older items, the technorati API), which mention or otherwise discuss this vulnerability.

2009/04/21 04:07:00 | Windows Deluxe Edition 2009 v.1.0 Multi Bootable

from: Ngunduh Niyee...

Windows Deluxe Edition 2009 v.1.0 Multi Bootable | 1.09 GB Menu Boot Berisi :- 1) Windows XP Deluxe Edition 2009 (All Driver Version) 2) ... - Network Map in Windows Vista does not display computers that are running Windows XP KB923561 - MS09-010

2009/04/16 21:45:00 | Microsoft Security Bulletin Minor Revisions - April 16, 2009

from: DP's Security Bits

Issued: April 16, 2009 Summary The following bulletins have undergone a minor revision increment. Please see the appropriate bulletin for more details. * MS09-010 - Critical Bulletin Information: * MS09-010 - Critical - http://www.microsoft.com/technet/security/bulletin/ms09-010

2009/04/14 23:39:32 | Microsoft April patch tuesday addresses 8 security issues

from: CGISecurity - Website and Application Security News

"MS09-010 Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477) This security update resolves two publicly disclosed vulnerabilities and two privately

2009/04/15 08:46:50 | Windows Vista Google Alerts for 15 April 2009

from: WindowsObserver.com

Google News Alert for: windows vista Windows Windows / Vista /XP/NT/98/2000 ZDNet.de - Germany … morph aus der Kategorie Audio-Produktion von Prosoniq Products Software ist ein Demo-Programm in englisch. morph läuft unter Windows Windows , Vista , XP,

Comments

Add Comment Hide Add Comment

No Comments.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.