CVE-2003-0666

CVE-2003-0666 describes a buffer overflow vulnerability in the Microsoft WordPerfect Converter, allowing remote attackers to execute arbitrary code. This flaw is triggered by specially crafted Corel WordPerfect files containing modified data offset and size parameters. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, public exploit code exists, including an ExploitDB entry (EDB-23096), though there is no evidence of active exploitation or significant community discussion.