Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mskbMicrosoftKB923561
HistoryApr 17, 2018 - 12:00 a.m.

MS09-010: Description of the update for Windows WordPad Converter: April 14, 2009

2018-04-1700:00:00
Microsoft
support.microsoft.com
14

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.897 High

EPSS

Percentile

98.8%

JSON

MS09-010: Description of the update for Windows WordPad Converter: April 14, 2009

INTRODUCTION

Microsoft has released security bulletin MS09-010. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

More Information

Known issues with this security update

This security update cannot be installed if the workaround that was described in security advisory 960906 was used

When you install this security update, the installation may fail if the workaround that was described in Microsoft Security Advisory 960906 was applied. This issue occurs because the workaround removed all permissions from the file. Therefore, the installer cannot overwrite the file by using the new version.

Security Advisory 960906 offered a workaround to protect against the vulnerability that is described in CVE-2008-4841. The workaround changed the access control list on the affected binaries. This workaround helped to protect customers against the attack because the vulnerable binary could no longer be loaded.

You must roll back the workaround before you install this security update. To do this, an administrator must type the following commands at the command prompt, and then press ENTER after each command.

Note Some of these commands may result in an error message. This error message is expected:

echo y| cacls β€œ%ProgramFiles%\Common Files\Microsoft Shared\TextConv\mswrd832.cnv” /E /R everyone

echo y| cacls β€œ%ProgramFiles(x86)%\Common Files\Microsoft Shared\TextConv\mswrd832.cnv” /E /R everyone

echo y| cacls β€œ%ProgramFiles%\Windows NT\Accessories\mswrd8.wpc” /E /R everyone

echo y| cacls β€œ%ProgramFiles%\Windows NT\Accessories\mswrd864.wpc” /E /R everyone

echo y| cacls β€œ%ProgramFiles(x86)%\Windows NT\Accessories\mswrd8.wpc” /E /R everyone

FILE INFORMATION

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows 2000 file information

For all supported versions of Microsoft Windows 2000 Service Pack 4

File name File version File size Date Time Platform
Mswrd6.wpc 10.0.803.10 186,880 10-Apr-2008 10:10 Not Applicable
Mswrd8.wpc 10.0.803.10 279,552 10-Apr-2008 10:10 Not Applicable
Sp3res.dll 5.0.2195.7226 6,313,472 05-Jan-2009 07:07 x86
Sysmain.sdb Not Applicable 333,008 25-Mar-2009 02:23 Not Applicable
Wordpad.exe 5.0.2195.7155 187,664 30-Apr-2008 06:08 x86
Write.wpc 10.0.803.10 89,088 10-Apr-2008 10:10 Not Applicable

Windows XP and Windows Server 2003 file information

  • The files that apply to a specific milestone (RTM, SPn) and service branch (QFE, GDR) are noted in the β€œSP requirement” and β€œService branch” columns.
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
  • In addition to the files that are listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x86-based versions of Windows XP

File name File version File size Date Time Platform SP requirement Service branch
Mswrd8.wpc 10.0.803.10 279,552 21-Apr-2008 09:56 Not Applicable SP2 SP2GDR
Sysmain.sdb Not Applicable 1,193,414 27-Mar-2009 07:09 Not Applicable SP2 SP2GDR
Wordpad.exe 5.1.2600.3355 215,552 21-Apr-2008 10:02 x86 SP2 SP2GDR
Xpsp3res.dll 5.1.2600.3314 351,744 15-Feb-2008 09:06 x86 SP2 SP2GDR
Acadproc.dll 5.1.2600.3543 39,424 25-Mar-2009 05:54 x86 SP2 SP2QFE
Mswrd8.wpc 10.0.803.10 279,552 21-Apr-2008 09:35 Not Applicable SP2 SP2QFE
Sysmain.sdb Not Applicable 1,198,442 27-Mar-2009 05:59 Not Applicable SP2 SP2QFE
Wordpad.exe 5.1.2600.3355 215,552 21-Apr-2008 09:26 x86 SP2 SP2QFE
Xpsp3res.dll 5.1.2600.3314 351,744 15-Feb-2008 09:06 x86 SP2 SP2QFE
Mswrd8.wpc 2007.10.31.10 279,552 21-Apr-2008 12:20 Not Applicable SP3 SP3GDR
Sysmain.sdb Not Applicable 1,203,922 27-Mar-2009 06:58 Not Applicable SP3 SP3GDR
Wordpad.exe 5.1.2600.5584 215,552 21-Apr-2008 12:08 x86 SP3 SP3GDR
Xpsp4res.dll 5.1.2600.5594 2,560 03-May-2008 11:55 x86 SP3 SP3GDR
Mswrd8.wpc 2007.10.31.10 279,552 22-Apr-2008 00:58 Not Applicable SP3 SP3QFE
Sysmain.sdb Not Applicable 1,203,922 27-Mar-2009 06:33 Not Applicable SP3 SP3QFE
Wordpad.exe 5.1.2600.5584 215,552 21-Apr-2008 12:15 x86 SP3 SP3QFE
Xpsp4res.dll 5.1.2600.5594 2,560 03-May-2008 11:55 x86 SP3 SP3QFE

For all supported x64-based versions of Windows Server 2003 and of Windows XP Professional x64 edition

File name File version File size Date Time Platform SP requirement Service branch
Spupdsvc.exe 6.3.4.1 25,904 27-Mar-2009 19:42 x64 None Not Applicable
Mswrd8.wpc 10.0.803.10 384,000 27-Mar-2009 19:20 Not Applicable SP1 SP1GDR
Sysmain.sdb Not Applicable 18,160 27-Mar-2009 19:20 Not Applicable SP1 SP1GDR
Wordpad.exe 5.2.3790.3129 342,528 27-Mar-2009 19:20 x64 SP1 SP1GDR
Wmswrd8.wpc 10.0.803.10 279,552 27-Mar-2009 19:20 Not Applicable SP1 SP1GDR\WOW
Wsysmain.sdb Not Applicable 1,344,022 27-Mar-2009 19:20 Not Applicable SP1 SP1GDR\WOW
Ww03a2409.dll 5.2.3790.3090 29,696 27-Mar-2009 19:20 x86 SP1 SP1GDR\WOW
Wwordpad.exe 5.2.3790.3129 217,088 27-Mar-2009 19:20 x86 SP1 SP1GDR\WOW
Mswrd8.wpc 10.0.803.10 384,000 27-Mar-2009 19:20 Not Applicable SP1 SP1QFE
Sysmain.sdb Not Applicable 18,160 27-Mar-2009 19:20 Not Applicable SP1 SP1QFE
Wordpad.exe 5.2.3790.3129 342,528 27-Mar-2009 19:20 x64 SP1 SP1QFE
Wacgenral.dll 5.2.3790.3313 1,860,608 27-Mar-2009 19:20 x86 SP1 SP1QFE\WOW
Wmswrd8.wpc 10.0.803.10 279,552 27-Mar-2009 19:20 Not Applicable SP1 SP1QFE\WOW
Wsysmain.sdb Not Applicable 1,348,570 27-Mar-2009 19:20 Not Applicable SP1 SP1QFE\WOW
Ww03a2409.dll 5.2.3790.3090 29,696 27-Mar-2009 19:20 x86 SP1 SP1QFE\WOW
Wwordpad.exe 5.2.3790.3129 217,088 27-Mar-2009 19:20 x86 SP1 SP1QFE\WOW
Mswrd8.wpc 10.0.803.10 384,000 27-Mar-2009 19:30 Not Applicable SP2 SP2GDR
Sysmain.sdb Not Applicable 19,474 27-Mar-2009 19:30 Not Applicable SP2 SP2GDR
W03a3409.dll 5.2.3790.4236 15,360 27-Mar-2009 19:30 x64 SP2 SP2GDR
Wordpad.exe 5.2.3790.4282 342,528 27-Mar-2009 19:30 x64 SP2 SP2GDR
Wmswrd8.wpc 10.0.803.10 279,552 27-Mar-2009 19:30 Not Applicable SP2 SP2GDR\WOW
Wsysmain.sdb Not Applicable 1,359,394 27-Mar-2009 19:30 Not Applicable SP2 SP2GDR\WOW
Ww03a3409.dll 5.2.3790.4236 14,848 27-Mar-2009 19:30 x86 SP2 SP2GDR\WOW
Wwordpad.exe 5.2.3790.4282 217,088 27-Mar-2009 19:30 x86 SP2 SP2GDR\WOW
Mswrd8.wpc 10.0.803.10 384,000 27-Mar-2009 19:20 Not Applicable SP2 SP2QFE
Sysmain.sdb Not Applicable 19,838 27-Mar-2009 19:20 Not Applicable SP2 SP2QFE
W03a3409.dll 5.2.3790.4236 15,360 27-Mar-2009 19:20 x64 SP2 SP2QFE
Wordpad.exe 5.2.3790.4282 342,528 27-Mar-2009 19:20 x64 SP2 SP2QFE
Wmswrd8.wpc 10.0.803.10 279,552 27-Mar-2009 19:20 Not Applicable SP2 SP2QFE\WOW
Wsysmain.sdb Not Applicable 1,359,206 27-Mar-2009 19:20 Not Applicable SP2 SP2QFE\WOW
Ww03a3409.dll 5.2.3790.4236 14,848 27-Mar-2009 19:20 x86 SP2 SP2QFE\WOW
Wwordpad.exe 5.2.3790.4282 217,088 27-Mar-2009 19:20 x86 SP2 SP2QFE\WOW

For all supported x86-based versions of Windows Server 2003

File name File version File size Date Time Platform SP requirement Service branch
Spupdsvc.exe 6.3.4.1 23,856 01-Mar-2007 05:47 x86 None Not Applicable
Mswrd8.wpc 10.0.803.10 279,552 29-Apr-2008 11:10 Not Applicable SP1 SP1GDR
Sysmain.sdb Not Applicable 1,344,022 27-Mar-2009 08:03 Not Applicable SP1 SP1GDR
Wordpad.exe 5.2.3790.3129 217,088 29-Apr-2008 11:06 x86 SP1 SP1GDR
Acgenral.dll 5.2.3790.3313 1,860,608 25-Mar-2009 08:09 x86 SP1 SP1QFE
Mswrd8.wpc 10.0.803.10 279,552 25-Mar-2009 21:28 Not Applicable SP1 SP1QFE
Sysmain.sdb Not Applicable 1,348,570 27-Mar-2009 07:10 Not Applicable SP1 SP1QFE
Wordpad.exe 5.2.3790.3129 217,088 29-Apr-2008 11:06 x86 SP1 SP1QFE
Mswrd8.wpc 10.0.803.10 279,552 29-Apr-2008 16:38 Not Applicable SP2 SP2GDR
Sysmain.sdb Not Applicable 1,359,394 27-Mar-2009 07:47 Not Applicable SP2 SP2GDR
W03a3409.dll 5.2.3790.4236 14,848 14-Feb-2008 09:51 x86 SP2 SP2GDR
Wordpad.exe 5.2.3790.4282 217,088 29-Apr-2008 16:47 x86 SP2 SP2GDR
Mswrd8.wpc 10.0.803.10 279,552 29-Apr-2008 16:45 Not Applicable SP2 SP2QFE
Sysmain.sdb Not Applicable 1,359,206 27-Mar-2009 07:38 Not Applicable SP2 SP2QFE
W03a3409.dll 5.2.3790.4236 14,848 14-Feb-2008 09:51 x86 SP2 SP2QFE
Wordpad.exe 5.2.3790.4282 217,088 29-Apr-2008 16:35 x86 SP2 SP2QFE

For all supported IA-64-based versions of Windows Server 2003

File name File version File size Date Time Platform SP requirement Service branch
Spupdsvc.exe 6.3.4.1 39,728 27-Mar-2009 19:41 IA-64 None Not Applicable
Mswrd8.wpc 10.0.803.10 733,184 27-Mar-2009 19:20 Not Applicable SP1 SP1GDR
Sysmain.sdb Not Applicable 18,240 27-Mar-2009 19:20 Not Applicable SP1 SP1GDR
Wordpad.exe 5.2.3790.3129 607,232 27-Mar-2009 19:20 IA-64 SP1 SP1GDR
Wmswrd8.wpc 10.0.803.10 279,552 27-Mar-2009 19:20 Not Applicable SP1 SP1GDR\WOW
Wsysmain.sdb Not Applicable 1,344,022 27-Mar-2009 19:20 Not Applicable SP1 SP1GDR\WOW
Ww03a2409.dll 5.2.3790.3090 29,696 27-Mar-2009 19:20 x86 SP1 SP1GDR\WOW
Wwordpad.exe 5.2.3790.3129 217,088 27-Mar-2009 19:20 x86 SP1 SP1GDR\WOW
Mswrd8.wpc 10.0.803.10 733,184 27-Mar-2009 19:20 Not Applicable SP1 SP1QFE
Sysmain.sdb Not Applicable 18,240 27-Mar-2009 19:20 Not Applicable SP1 SP1QFE
Wordpad.exe 5.2.3790.3129 607,232 27-Mar-2009 19:20 IA-64 SP1 SP1QFE
Wacgenral.dll 5.2.3790.3313 1,860,608 27-Mar-2009 19:20 x86 SP1 SP1QFE\WOW
Wmswrd8.wpc 10.0.803.10 279,552 27-Mar-2009 19:20 Not Applicable SP1 SP1QFE\WOW
Wsysmain.sdb Not Applicable 1,348,570 27-Mar-2009 19:20 Not Applicable SP1 SP1QFE\WOW
Ww03a2409.dll 5.2.3790.3090 29,696 27-Mar-2009 19:20 x86 SP1 SP1QFE\WOW
Wwordpad.exe 5.2.3790.3129 217,088 27-Mar-2009 19:20 x86 SP1 SP1QFE\WOW
Mswrd8.wpc 10.0.803.10 733,184 27-Mar-2009 19:25 Not Applicable SP2 SP2GDR
Sysmain.sdb Not Applicable 19,118 27-Mar-2009 19:25 Not Applicable SP2 SP2GDR
W03a3409.dll 5.2.3790.4236 13,824 27-Mar-2009 19:25 IA-64 SP2 SP2GDR
Wordpad.exe 5.2.3790.4282 607,232 27-Mar-2009 19:25 IA-64 SP2 SP2GDR
Wmswrd8.wpc 10.0.803.10 279,552 27-Mar-2009 19:25 Not Applicable SP2 SP2GDR\WOW
Wsysmain.sdb Not Applicable 1,359,394 27-Mar-2009 19:25 Not Applicable SP2 SP2GDR\WOW
Ww03a3409.dll 5.2.3790.4236 14,848 27-Mar-2009 19:25 x86 SP2 SP2GDR\WOW
Wwordpad.exe 5.2.3790.4282 217,088 27-Mar-2009 19:25 x86 SP2 SP2GDR\WOW
Mswrd8.wpc 10.0.803.10 733,184 27-Mar-2009 19:20 Not Applicable SP2 SP2QFE
Sysmain.sdb Not Applicable 19,482 27-Mar-2009 19:20 Not Applicable SP2 SP2QFE
W03a3409.dll 5.2.3790.4236 13,824 27-Mar-2009 19:20 IA-64 SP2 SP2QFE
Wordpad.exe 5.2.3790.4282 607,232 27-Mar-2009 19:20 IA-64 SP2 SP2QFE
Wmswrd8.wpc 10.0.803.10 279,552 27-Mar-2009 19:20 Not Applicable SP2 SP2QFE\WOW
Wsysmain.sdb Not Applicable 1,359,206 27-Mar-2009 19:20 Not Applicable SP2 SP2QFE\WOW
Ww03a3409.dll 5.2.3790.4236 14,848 27-Mar-2009 19:20 x86 SP2 SP2QFE\WOW
Wwordpad.exe 5.2.3790.4282 217,088 27-Mar-2009 19:20 x86 SP2 SP2QFE\WOW

Related

saint 4
cve 2
cert 1
prion 2
checkpoint_advisories 1
nvd 2
cvelist 2
seebug 1
ubuntucve 1
securityvulns 2
openvas 2
nessus 1
saint
saint
Microsoft WordPad Word 97 text converter XST buffer overflow
2009-04-17 00:00:00
Microsoft WordPad Word 97 text converter XST buffer overflow
2009-04-17 00:00:00
Microsoft WordPad Word 97 text converter XST buffer overflow
2009-04-17 00:00:00
cve
cve
CVE-2008-4841
2008-12-10 14:00:01
CVE-2009-0259
2009-01-22 23:30:04
cert
cert
Microsoft WordPad Text Converter vulnerable to remote code execution
2008-12-11 00:00:00
prion
prion
Memory corruption
2008-12-10 14:00:00
Memory corruption
2009-01-22 23:30:00
checkpoint_advisories
checkpoint_advisories
Microsoft WordPad Word 97 Text Converter List Structure Stack Overflow (MS09-010; CVE-2008-4841)
2009-04-14 00:00:00
nvd
nvd
CVE-2008-4841
2008-12-10 14:00:01
CVE-2009-0259
2009-01-22 23:30:04
cvelist
cvelist
CVE-2008-4841
2008-12-10 13:33:00
CVE-2009-0259
2009-01-22 23:00:00
seebug
seebug
Microsoftε†™ε­—ζΏζ–‡δ»Άθ½¬ζ’ε™¨θΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž
2008-12-11 00:00:00
ubuntucve
ubuntucve
CVE-2009-0259
2009-01-22 00:00:00
securityvulns
securityvulns
Microsoft Wordpad / Microsoft Works multiple security vulnerabilities
2009-06-10 00:00:00
Microsoft Security Bulletin MS09-010 - Critical Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)
2009-04-14 00:00:00
openvas
openvas
WordPad and Office Text Converter Memory Corruption Vulnerability (960477)
2008-12-12 00:00:00
WordPad and Office Text Converter Memory Corruption Vulnerability (960477)
2008-12-12 00:00:00
nessus
nessus
MS09-010: Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)
2009-04-15 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.897 High

EPSS

Percentile

98.8%

JSON
Related for KB923561
saint4cve2cert1prion2checkpoint_advisories1nvd2cvelist2seebug1ubuntucve1securityvulns2openvas2nessus1