Security Bulletin 04-041 [included in Windows Update] KB 885836
Microsoft Security Bulletin MS04-041: Vulnerability in WordPad Could Allow Code Execution (885836):
http://www.microsoft.com/technet/security/bulletin/ms04-041.mspx
Vulnerability in Word Pad