CVE-2004-0901: Critical severity microsoft windows nt vulnerability
Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0901?
CVE-2004-0901 is classified as a critical vulnerability due to its ability to allow remote code execution.
How do I fix CVE-2004-0901?
To mitigate CVE-2004-0901, users should install the latest security patches provided by Microsoft for the affected software.
Which software is affected by CVE-2004-0901?
CVE-2004-0901 affects Microsoft Windows NT, Windows XP, and Windows 2003 Server among others.
What types of files can exploit CVE-2004-0901?
CVE-2004-0901 can be exploited using specially crafted .wri, .rtf, and .doc files.
Can CVE-2004-0901 be exploited via email?
Yes, CVE-2004-0901 can be exploited through malicious email attachments containing vulnerable file types.