Oval Definition:	oval:org.mitre.oval:def:5799
Revision Date: 2014-06-30 Version: 15 Title: WordPad and Office Text Converter Memory Corruption Vulnerability Description: Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in Microsoft Office Word 2000 SP3 and 2002 SP3; allows remote attackers to execute arbitrary code via a crafted Word 6 file that contains malformed data, aka "WordPad and Office Text Converter Memory Corruption Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-0087 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Word 2000 Microsoft Word 2002 Definition Synopsis WordPad on Windows 2000 Microsoft Windows 2000 SP4 or later is installed AND the version of wordpad.exe is less than 5.0.2195.7155 OR WordPad on Windows XP x86 SP2 Microsoft Windows XP (x86) SP2 is installed AND the version of wordpad.exe is less than 5.1.2600.3355 OR WordPad on Windows XP x86 SP3 Microsoft Windows XP (x86) SP3 is installed AND the version of wordpad.exe is less than 5.1.2600.5584 OR WordPad on Windows XP x64 SP1, Server 2003 Affected OS Microsoft Windows XP Professional x64 Edition SP1 is installed OR Microsoft Windows Server 2003 SP1 (x64) is installed OR Microsoft Windows Server 2003 SP1 (x86) is installed OR Microsoft Windows Server 2003 SP1 for Itanium is installed AND the version of wordpad.exe is less than 5.2.3790.3129 OR WordPad on Windows XP x64 SP2, Server 2003 Affected OS Microsoft Windows XP x64 Edition SP2 is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed OR Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows Server 2003 (ia64) SP2 is installed AND the version of wordpad.exe is less than 5.2.3790.4282 OR Mswrd632.cnv for Word 2000 or Word 2002 Word 2000 or Word 2002 Microsoft Word 2000 is installed OR Microsoft Word 2002 is installed AND the version of Mswrd632.cnv is less than 2003.1100.8245.0
BACK