NVD

Id
47570  
Name
CVE-2009-0235  
Description
Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Word 97 file that triggers memory corruption, related to use of inconsistent integer data sizes for an unspecified length field, aka "WordPad Word 97 Text Converter Stack Overflow Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-15  
Modified Date
2010-08-21  
Seq
2009-0235  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238394 47570 CVE-2009-0235 20090414 Microsoft WordPad Word97 Converter Stack Buffer Overflow Vulnerability  View
238395 47570 CVE-2009-0235 oval:org.mitre.oval:def:5893  View
238396 47570 CVE-2009-0235 MS09-010  View
238397 47570 CVE-2009-0235 34470  View
238398 47570 CVE-2009-0235 1022043  View
238399 47570 CVE-2009-0235 TA09-104A  View
238400 47570 CVE-2009-0235 ADV-2009-1024  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40197 JVNDB-2009-001203 Microsoft Windows の Word 97 テキストコンバーターにおけるバッファオーバーフローの脆弱性 Microsoft Windows のワードパッドにある Word 97 テキストコンバーターには、Word 97 ファイルの処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0235 37666 CVE-2009-0235 47570 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001203.html 2009-04-14 2009-05-12 View