There is a vulnerability in WordPad and Microsoft Office Word that could allow for remote code execution.
There is a vulnerability in WordPad and Microsoft Office Word that could allow for remote code execution. The vulnerability exists in the way that text converters in WordPad and Microsoft Office Word process memory when a user opens a specially crafted Word 97 file. Successful exploitation of this vulnerability could allow an attacker to take complete control of an affected system remotely.
Attack VectorMaliciously Crafted File
User Interactionuser interaction is needed
Vendor StatusResponded and patched
Vulnerable Systems
Windows
2000 SP4,
Windows
2003 Server SP 2,
Windows
2003 Server X64 SP2,
Windows
XP SP2,
Windows
XP SP3,
Windows
XP X64 Professional,
Vendor has provided a patch.
The vendor has released patches to address this issue
http://www.microsoft.com/technet/security/bulletin/ms09-073.mspx
(MS09-073) WordPad and Office Text converter Memory Corruption Vulnerability (975539)
http://www.microsoft.com/technet/security/bulletin/ms09-073.mspx