CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2004-0571

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1960%
EPSS Percentile29.07th
Published2005年1月10日
Last Modified2026年4月16日

Vulnerability Description

Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901.

Affected Platforms (CPE)

💻
Microsoft

Windows 2000

All versions
💻
Microsoft

Windows 2000

All versions
💻
Microsoft

Windows 2000

All versions
💻
Microsoft

Windows 2000

All versions
💻
Microsoft

Windows 2000

All versions
💻
Microsoft

Windows 2003 Server

= enterprise
💻
Microsoft

Windows 2003 Server

= enterprise_64-bit
💻
Microsoft

Windows 2003 Server

= r2
💻
Microsoft

Windows 2003 Server

= r2
💻
Microsoft

Windows 2003 Server

= standard
💻
Microsoft

Windows 2003 Server

= web
💻
Microsoft

Windows 98

All versions
💻
Microsoft

Windows 98se

All versions
💻
Microsoft

Windows Me

All versions
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Xp

All versions
💻
Microsoft

Windows Xp

All versions
💻
Microsoft

Windows Xp

All versions
💻
Microsoft

Windows Xp

All versions
💻
Microsoft

Windows Xp

All versions
💻
Microsoft

Windows Xp

All versions

References & Advisories

🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-041
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/18337
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1168
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1417
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1959
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1976
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3416
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3743

相關漏洞威脅

CVE-2000-103410.0

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a ...

CVE-2000-006110.0

Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document h...

CVE-2000-022210.0

The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote ...

CVE-2000-107110.0

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote...