cbcvebase.
CVE-2004-0901
published 2005-01-10

CVE-2004-0901: Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to…

PriorityP347critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
31.05%
98.0th percentile
Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.

Affected

6 ranges
VendorProductVersion rangeFixed in
microsoftwindows_2003_server——
microsoftwindows_2003_server——
microsoftwindows_2003_server——
microsoftwindows_2003_server——
microsoftwindows_2003_server——
microsoftwindows_nt——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.