CVE-2009-0087: Microsoft Office Word

High severity, CVSS 9.3. EPSS: 25.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in Microsoft Office Word 2000 SP3 and 2002 SP3; allows remote attackers to execute arbitrary code via a crafted Word 6 file that contains malformed data, aka "WordPad and Office Text Converter Memory Corruption Vulnerability."

Affected products

• Microsoft Office Word: version 2000 only; version 2002 only
• Microsoft Windows 2000: affected versions not specified
• Microsoft Windows 2003 Server: any version
• Microsoft Windows XP: any version

Published 2009-04-15. Last modified 2026-06-16.