Strix
26.1K

CVE-2009-0088

UnknownEPSS 28.45%

Last modified

CVE-2009-0088 is a vulnerability of currently unknown severity. The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka "Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability.". EPSS estimates a 28.45% chance of exploitation in the next 30 days.

Description

The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka "Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability."

Metrics

EPSS Probability
28.45%

97.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
MicrosoftOffice Converter Pack2003—
MicrosoftOffice Word2000Sp3
MicrosoftOffice Word2002Sp3
MicrosoftWindows 2000All versionsSp4
MicrosoftWindows Server 2003All versions—
MicrosoftWindows XpAll versions—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2009-0088?
The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka "Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability."
How severe is CVE-2009-0088?
Severity scoring for CVE-2009-0088 is pending analysis. The EPSS model estimates a 28.45% probability of exploitation in the next 30 days.
How do I fix CVE-2009-0088?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2009

View all 2009CVEs →

Are you affected by CVE-2009-0088?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST