Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
Multiple Vulnerabilities in Microsoft WordPad
Two vulnerabilities exist in Microsoft WordPad, both of which could result in the execution of arbitrary code on the vulnerable system.
Ken Pfeil
December 17, 2004
2 Min Read
Reported December 14, 2004, byMicrosoft
VERSIONS AFFECTED
· Microsoft Windows NT Server 4.0 Service Pack 6a · Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6 · Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4 · Microsoft Windows XP Service Pack 1 · Microsoft Windows Server 2003 · Microsoft Windows XP 64-Bit Edition Service Pack 1 · Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me) |
DESCRIPTION
Two vulnerabilities exist in Microsoft WordPad, both of which could result inthe execution of arbitrary code on the vulnerable system. The problem existswhen a specially crafted file is opened by WordPad or another application thatutilizes the vulnerable library and results in a buffer overflow.
VENDOR RESPONSE
Microsoft has released SecurityBulletin MS04-041, "Vulnerability in WordPad Could Allow CodeExecution (885836)," to address these vulnerabilities and recommends thataffected users immediately apply the appropriate patch listed in the bulletin.
CREDIT
Discovered by Greg Jones and Lord Yup.
Read more about:
MicrosoftAbout the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
