WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents which allows remote attackers to execute arbitrary code via a crafted .doc file aka \WordPad Converter Parsing Vulnerability.\