CVE-2009-0235

CVE-2009-0235 describes a critical stack-based buffer overflow in the Word 97 text converter within WordPad, affecting Microsoft Windows 2000, XP, and Server 2003. This vulnerability allows remote attackers to execute arbitrary code by tricking a user into opening a specially crafted Word 97 file, leading to memory corruption. With a CVSS score of 9.3 and an EPSS percentile of 98.7%, it represents a high-severity threat with a network attack vector and medium complexity, potentially resulting in complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, no publicly available exploit code in Metasploit or ExploitDB, and minimal community discussion or media coverage.