Microsoft Wordpad '.doc 'file empty pointer reference Denial of Service Vulnerability

Release date:
Updated on: 2012-06-01

Affected Systems:
Microsoft wordpactive 5.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 53751

Wordpad is a simple text editing tool provided by attachments in Windows operating systems.

Microsoft Wordpad 5.1 has a remote denial of service vulnerability with a null pointer reference. Attackers can exploit this vulnerability to cause application crashes or execute arbitrary code.

<* Source: condis
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

Http://www.securityfocus.com/data/vulnerabilities/exploits/53751.zip

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Microsoft
---------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.microsoft.com/technet/security/