MS Windows Wordpad .doc File Local Denial of Service PoC

vendor:

Windows XP

by:

securfrog

7.8

CVSS

HIGH

Denial of Service

CWE

Product Name: Windows XP

Affected Version From: Microsoft Windows XP SP3

Affected Version To: Microsoft Windows XP SP3

Patch Exists: YES

Related CWE: CVE-2008-4609

CPE: o:microsoft:windows_xp::sp3

Metasploit: https://www.rapid7.com/db/vulnerabilities/cisco-nx-os-cisco-sa-20090908-tcp24/, https://www.rapid7.com/db/vulnerabilities/cisco-sa-20090908-tcp24/

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows

2008

MS Windows Wordpad .doc File Local Denial of Service PoC

A denial of service vulnerability exists in Microsoft Windows Wordpad when opening a specially crafted .doc file. The vulnerability is caused due to an error in the handling of .doc files and can be exploited to crash the application.

Mitigation:

No known mitigation

Source

MS Windows Wordpad .doc File Local Denial of Service PoC

Mitigation:

Exploit-DB raw data: