CVE

Id
39941  
CVE No.
CVE-2009-2506  
Status
Candidate  
Description
Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a DOC file with an invalid number of property names in the DocumentSummaryInformation stream, which triggers a heap-based buffer overflow.  
Phase
Assigned (20090717)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438984 39941 CVE-2009-2506 IDEFENSE:20091208 Microsoft WordPad Word97 Converter Integer Overflow Vulnerability  View
438985 39941 CVE-2009-2506 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=834  View
438986 39941 CVE-2009-2506 CONFIRM:http://support.avaya.com/css/P8/documents/100070184  View
438987 39941 CVE-2009-2506 MS:MS09-073  View
438988 39941 CVE-2009-2506 URL:http://www.microsoft.com/technet/security/Bulletin/MS09-073.mspx  View
438989 39941 CVE-2009-2506 CERT:TA09-342A  View
438990 39941 CVE-2009-2506 URL:http://www.us-cert.gov/cas/techalerts/TA09-342A.html  View
438991 39941 CVE-2009-2506 BID:37216  View
438992 39941 CVE-2009-2506 URL:http://www.securityfocus.com/bid/37216  View
438993 39941 CVE-2009-2506 OVAL:oval:org.mitre.oval:def:5846  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41235 JVNDB-2009-002242 Microsoft Windows の CryptoAPI コンポーネントにおける任意の SSL サーバになりすまされる脆弱性 Microsoft Windows の CryptoAPI コンポーネントには、X.509 証明書内の Common Name (CN) フィールドにある "" 文字を適切に処理しないため、任意の SSL サーバになりすまされる脆弱性が存在します。 CVE-2009-2510 39941 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002242.html  View