Vulnerability in Microsoft Windows 2000
CVE-2004-0901
Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.
EPSS: 0.319 (98.1th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2000
- Microsoft Windows_2003_server — versions enterprise, enterprise_64-bit, r2
- Microsoft Windows_98
- Microsoft Windows_98se
- Microsoft Windows_me
- Microsoft Windows_nt — versions 4.0
- Microsoft Windows_xp
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)