CVE-2009-0226

2009-05-1222:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-0226

legacy file format vulnerability

microsoft office

powerpoint

buffer overflow

remote code execution

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.941 High

EPSS

Percentile

99.2%

JSON

Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka “Legacy File Format Vulnerability,” a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0227, and CVE-2009-1137.

Affected configurations

NVD

Node

microsoftoffice_powerpointMatch2000sp3

microsoftoffice_powerpointMatch2002sp3

microsoftoffice_powerpointMatch2003sp3

CPENameOperatorVersion
microsoft:office_powerpointmicrosoft office powerpointeq2000
microsoft:office_powerpointmicrosoft office powerpointeq2002
microsoft:office_powerpointmicrosoft office powerpointeq2003

CPE	Name	Operator	Version
microsoft:office_powerpoint	microsoft office powerpoint	eq	2000
microsoft:office_powerpoint	microsoft office powerpoint	eq	2002
microsoft:office_powerpoint	microsoft office powerpoint	eq	2003