CVE-2009-0088

N/A Unknown
Published: April 15, 2009 Modified: April 23, 2026
View on NVD

Description

The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka "Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=782
Source: secure@microsoft.com
http://osvdb.org/53663
Source: secure@microsoft.com
http://www.securitytracker.com/id?1022043
Source: secure@microsoft.com
http://www.us-cert.gov/cas/techalerts/TA09-104A.html
Source: secure@microsoft.com
US Government Resource
http://www.vupen.com/english/advisories/2009/1024
Source: secure@microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010
Source: secure@microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5736
Source: secure@microsoft.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=782
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/53663
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1022043
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.us-cert.gov/cas/techalerts/TA09-104A.html
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.vupen.com/english/advisories/2009/1024
Source: af854a3a-2127-422b-91ae-364da2661108
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5736
Source: af854a3a-2127-422b-91ae-364da2661108

14 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
63.0%
98th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-20

Affected Vendors

microsoft

Related CVEs

CVE-2026-7015 2.4
CVE-2026-7014 2.4
CVE-2026-7013 2.4
CVE-2026-42254 4.0
CVE-2026-7012 2.4