CVE

Id
9329  
CVE No.
CVE-2004-0901  
Status
Candidate  
Description
Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.  
Phase
Assigned (20040922)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
61961 9329 CVE-2004-0901 IDEFENSE:20041214 Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability  View
61962 9329 CVE-2004-0901 URL:http://www.idefense.com/application/poi/display?id=162&type=vulnerabilities&flashstatus=true  View
61963 9329 CVE-2004-0901 MS:MS04-041  View
61964 9329 CVE-2004-0901 URL:http://www.microsoft.com/technet/security/bulletin/ms04-041.asp  View
61965 9329 CVE-2004-0901 CIAC:P-055  View
61966 9329 CVE-2004-0901 URL:http://www.ciac.org/ciac/bulletins/p-055.shtml  View
61967 9329 CVE-2004-0901 OVAL:oval:org.mitre.oval:def:1241  View
61968 9329 CVE-2004-0901 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1241  View
61969 9329 CVE-2004-0901 OVAL:oval:org.mitre.oval:def:1655  View
61970 9329 CVE-2004-0901 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1655  View
61971 9329 CVE-2004-0901 OVAL:oval:org.mitre.oval:def:3310  View
61972 9329 CVE-2004-0901 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3310  View
61973 9329 CVE-2004-0901 OVAL:oval:org.mitre.oval:def:3882  View
61974 9329 CVE-2004-0901 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3882  View
61975 9329 CVE-2004-0901 OVAL:oval:org.mitre.oval:def:4076  View
61976 9329 CVE-2004-0901 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4076  View
61977 9329 CVE-2004-0901 OVAL:oval:org.mitre.oval:def:4576  View
61978 9329 CVE-2004-0901 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4576  View
61979 9329 CVE-2004-0901 OVAL:oval:org.mitre.oval:def:4749  View
61980 9329 CVE-2004-0901 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4749  View
61981 9329 CVE-2004-0901 OVAL:oval:org.mitre.oval:def:539  View
61982 9329 CVE-2004-0901 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:539  View
61983 9329 CVE-2004-0901 XF:win-converter-font-code-execution(18338)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63053 JVNDB-2004-000395 Mozilla 製品における複数のヒープオーバーフローの脆弱性 Mozilla 製品には、「ページ送信」機能、非アスキー文字を含むホスト名の長いリンクや悪質な POP3 サーバの応答により、ヒープオーバーフローが発生する脆弱性が存在します。 CVE-2004-0902 9329 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000395.html  View