Stack Corruption Vulnerability in Microsoft Office Word 2000 with WordPerfect 6.x Converter

CVE-2009-0088

Summary

The WordPerfect 6.x Converter (WPFT632.CNV, version 1998.1.27.0) included in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack lacks appropriate validation for string lengths. This weakness allows remote attackers to execute arbitrary code by crafting a malicious WordPerfect 6.x file. The issue is linked to an unspecified counter and control structures on the stack, which could lead to potential security breaches if exploited.

References