Improper input validation in Microsoft Office_converter_pack
CVE-2009-0088
The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitra…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.284 (97.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office_converter_pack — versions 2003
- Microsoft Office_word — versions 2000, 2002
- Microsoft Windows_2000
- Microsoft Windows_server_2003
- Microsoft Windows_xp
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (x_refsource_IDEFENSE, third-party-advisory)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (x_refsource_OSVDB, vdb-entry)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)