Lucene search

MicrosoftCVE-2009-0088

HistoryApr 15, 2009 - 8:00 a.m.

CVE-2009-0088

2009-04-1508:00:00

CWE-20

microsoft

web.nvd.nist.gov

wordperfect

converter

microsoft office

word

2000

stack corruption

vulnerability

cve-2009-0088

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.28

Percentile

96.9%

JSON

The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka “Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability.”

Affected configurations

Nvd

Node

microsoftoffice_converter_packMatch2003

microsoftoffice_wordMatch2000sp3

microsoftoffice_wordMatch2002sp3

AND

microsoftwindows_2000sp4

microsoftwindows_server_2003

microsoftwindows_server_2003sp1

microsoftwindows_server_2003sp1itanium

microsoftwindows_server_2003sp2

microsoftwindows_xppro_x64

microsoftwindows_xpsp2

microsoftwindows_xpsp2pro_x64

microsoftwindows_xpsp3

VendorProductVersionCPE
microsoftoffice_converter_pack2003cpe:2.3:a:microsoft:office_converter_pack:2003:*:*:*:*:*:*:*
microsoftoffice_word2000cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*
microsoftoffice_word2002cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
microsoftwindows_server_2003*cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
microsoftwindows_server_2003*cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*
microsoftwindows_server_2003*cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*
microsoftwindows_server_2003*cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office_converter_pack	2003	cpe:2.3:a:microsoft:office_converter_pack:2003:::::::*
microsoft	office_word	2000	cpe:2.3:a:microsoft:office_word:2000:sp3::::::
microsoft	office_word	2002	cpe:2.3:a:microsoft:office_word:2002:sp3::::::
microsoft	windows_2000	*	cpe:2.3:o:microsoft:windows_2000::sp4::::::*
microsoft	windows_server_2003	*	cpe:2.3:o:microsoft:windows_server_2003::::::::
microsoft	windows_server_2003	*	cpe:2.3:o:microsoft:windows_server_2003::sp1::::::*
microsoft	windows_server_2003	*	cpe:2.3:o:microsoft:windows_server_2003::sp1:itanium:::::
microsoft	windows_server_2003	*	cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp:::pro_x64:::::*
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp2::::::*