09.03.2003 - MS03-036: Buffer Overrun in WordPerfect Converter Could Allow Code Execution (827103)

There is a flaw in the way that the Microsoft WordPerfect converter handles Corel® WordPerfect documents. A security vulnerability results because the converter does not correctly validate certain parameters when it opens a WordPerfect document, which results in an unchecked buffer. As a result, an attacker could craft a malicious WordPerfect document that could allow code of their choice to be executed if an application that used the WordPerfect converter opened the document. Microsoft Word and Microsoft PowerPoint (which are part of the Office suite), FrontPage (which is available as part of the Office suite or separately), Publisher, and Microsoft Works Suite can all use the Microsoft Office WordPerfect converter. - Download Office XP Patch - Download Office 2000 Patch - View Microsoft Knowledge Base Article - 827103 - Visit Microsoft Corporation