iDefense Security Advisory 12.08.09 – Remote exploitation of an integer overflow vulnerability in Microsoft Corp.’s WordPad could allow an attacker to execute arbitrary code with the privileges of the current user. iDefense has confirmed the existence of this vulnerability in WordPad version 5.1 for Windows XP SP3 and SP2. Other versions of Windows may also be affected. However, Vista and Server 2008 are not affected as they no longer contain the Word97 converter.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/83690/12.08.09-2.txt
Source: https://packetstormsecurity.com/files/83690/iDEFENSE-Security-Advisory-2009-12-08.2.html