CVE-2009-0087

Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6…

published April 15, 2009

CVSS
—
EPSS
26%
Percentile
98.0
In the wild
Unconfirmed
What it is

⚠️ A crafty Word 6 file could be your worst nightmare! This vulnerability hides in the Word text converter, allowing remote attackers to execute arbitrary code — like a magician pulling a rabbit from a hat! Think of it like a restaurant that accepts any old recipe card without checking for allergens. If a malicious card slips through, it could serve a dish that’s not just unappetizing but potentially harmful! An attacker could leverage this vulnerability to execute arbitrary code on affected systems, potentially leading to unauthorized access or data loss. Imagine someone sneaking into your kitchen and altering the recipe to their liking! This could create havoc with your sensitive information!

Put simply

Think of it like a restaurant that accepts any old recipe card without checking for allergens. If a malicious card slips through, it could serve a dish that’s not just unappetizing but potentially harmful! The vulnerability arises from memory corruption within the Word 6 text converter in WordPad and Word, allowing remote attackers to manipulate files and run malicious code if they send a specially crafted Word 6 file.

What to do

An attacker could leverage this vulnerability to execute arbitrary code on affected systems, potentially leading to unauthorized access or data loss. Imagine someone sneaking into your kitchen and altering the recipe to their liking! This could create havoc with your sensitive information! While no specific patch has been released, it's wise to disable the opening of Word 6 files if they're not needed. Additionally, consider upgrading to newer versions of Windows and Microsoft Office that don't rely on the outdated Word 6 converter. Regularly review file type security settings! You’ve got this! Stay proactive, keep your systems safe, and remember — you’re a security hero! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25892 · 98.0th percentile
Published
2009-04-15T03:49Z
EPSS history
Timeline
  • 15 APR 03:49Z
    Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6…
    cvelistv5