Lucene search

[email protected]CVE-2004-0901

HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-0901

2005-01-1005:00:00

[email protected]

web.nvd.nist.gov

microsoft word

mswrd632.wpc

code execution

vulnerability

font conversion

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.516 Medium

EPSS

Percentile

97.6%

JSON

Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka “Font Conversion Vulnerability,” a different vulnerability than CVE-2004-0571.

Affected configurations

NVD

Node

microsoftwindows_2000

microsoftwindows_2000sp1

microsoftwindows_2000sp2

microsoftwindows_2000sp3

microsoftwindows_2000sp4

microsoftwindows_2003_serverMatchenterprise64-bit

microsoftwindows_2003_serverMatchenterprise_64-bit

microsoftwindows_2003_serverMatchr264-bit

microsoftwindows_2003_serverMatchr2datacenter_64-bit

microsoftwindows_2003_serverMatchstandard64-bit

microsoftwindows_2003_serverMatchweb

microsoftwindows_98gold

microsoftwindows_98se

microsoftwindows_me

microsoftwindows_ntMatch4.0enterprise_server

microsoftwindows_ntMatch4.0server

microsoftwindows_ntMatch4.0terminal_server

microsoftwindows_ntMatch4.0workstation

microsoftwindows_ntMatch4.0sp1enterprise_server

microsoftwindows_ntMatch4.0sp1server

microsoftwindows_ntMatch4.0sp1terminal_server

microsoftwindows_ntMatch4.0sp1workstation

microsoftwindows_ntMatch4.0sp2enterprise_server

microsoftwindows_ntMatch4.0sp2server

microsoftwindows_ntMatch4.0sp2terminal_server

microsoftwindows_ntMatch4.0sp2workstation

microsoftwindows_ntMatch4.0sp3enterprise_server

microsoftwindows_ntMatch4.0sp3server

microsoftwindows_ntMatch4.0sp3terminal_server

microsoftwindows_ntMatch4.0sp3workstation

microsoftwindows_ntMatch4.0sp4enterprise_server

microsoftwindows_ntMatch4.0sp4server

microsoftwindows_ntMatch4.0sp4terminal_server

microsoftwindows_ntMatch4.0sp4workstation

microsoftwindows_ntMatch4.0sp5enterprise_server

microsoftwindows_ntMatch4.0sp5server

microsoftwindows_ntMatch4.0sp5terminal_server

microsoftwindows_ntMatch4.0sp5workstation

microsoftwindows_ntMatch4.0sp6enterprise_server

microsoftwindows_ntMatch4.0sp6server

microsoftwindows_ntMatch4.0sp6terminal_server

microsoftwindows_ntMatch4.0sp6workstation

microsoftwindows_ntMatch4.0sp6aenterprise_server

microsoftwindows_ntMatch4.0sp6aserver

microsoftwindows_ntMatch4.0sp6aworkstation

microsoftwindows_xp64-bit

microsoftwindows_xphome

microsoftwindows_xpgoldprofessional

microsoftwindows_xpsp164-bit

microsoftwindows_xpsp1home

microsoftwindows_xpsp2home

CPENameOperatorVersion
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqr2
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard
microsoft:windows_2003_servermicrosoft windows 2003 servereqweb
microsoft:windows_98microsoft windows 98eq*
microsoft:windows_98semicrosoft windows 98seeq*
microsoft:windows_memicrosoft windows meeq*
microsoft:windows_ntmicrosoft windows nteq4.0

CPE	Name	Operator	Version
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	r2
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard
microsoft:windows_2003_server	microsoft windows 2003 server	eq	web
microsoft:windows_98	microsoft windows 98	eq	*
microsoft:windows_98se	microsoft windows 98se	eq	*
microsoft:windows_me	microsoft windows me	eq	*
microsoft:windows_nt	microsoft windows nt	eq	4.0

Rows per page:

1-10 of 111

References

www.ciac.org/ciac/bulletins/p-055.shtml

www.idefense.com/application/poi/display?id=162&type=vulnerabilities&flashstatus=true

docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-041

exchange.xforce.ibmcloud.com/vulnerabilities/18338

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1241

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1655

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3310

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3882

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4076

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4576

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4749

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A539

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.516 Medium

EPSS

Percentile

97.6%

JSON

Related for CVE-2004-0901

cve1 cvelist2 nessus1 nvd2 securityvulns2 checkpoint_advisories2