Denial of Service Bug in WordPad

[clarksta]

The investigator MurderKey of Hellcode Research has discovered a bug in the Microsoft WordPad (in Windows XP SP3), which can allow an attacker to cause denial of service due to a depletion of memory error, which arises when a user tries to view a RTF file specially modified.


3821737597 60d8196ee7 or denial of service from WordPad
An attacker could exploit the vulnerability by creating an RTF file to allocate large amounts of memory and cause a denial of service condition, and has released an exploit that can exploit this vulnerability and it is recommended that you not receive files RTF format


Solution:
There is no patch available. For now it is recommended not to open files of this type (RTF) that are suspect.

clarksta Reviewed by clarksta on 2nd Sep 2009. Denial of Service Bug in WordPad http://www.besthostingforums.com/images/cdn/besthostingforums.com/2009/09/20.jpg The investigator MurderKey of Hellcode Research has discovered a bug in the Microsoft WordPad (in Windows XP SP3), which can allow an attacker to cause denial of service due to a depletion of memory error, which arises when a user tries to view a RTF file specially modified. 3821737597 60d8196ee7 or denial of service from WordPad An attacker could exploit the vulnerability by creating an RTF file to Rating: 5

[CyberHacK]

lol. wow, can't believe in Wordpad lol.

[Hyperz]

Interesting. It doesn't pose a big threat though. Same as if someone would send you a html or pdf file containing some JavaScript which will eat away resources. Worst that can happen is you having to press the reset button.