CVE-2009-1128

2009-05-1222:30:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2009-1128

microsoft office

powerpoint

remote code execution

crafted sound data

memory corruption

pp7 memory corruption vulnerability

nvd

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.803 High

EPSS

Percentile

98.3%

JSON

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka “PP7 Memory Corruption Vulnerability,” a different vulnerability than CVE-2009-1129.

CPENameOperatorVersion
microsoft:office_powerpointmicrosoft office powerpointeq2003
microsoft:office_powerpointmicrosoft office powerpointeq2002
microsoft:office_powerpointmicrosoft office powerpointeq2000

CPE	Name	Operator	Version
microsoft:office_powerpoint	microsoft office powerpoint	eq	2003
microsoft:office_powerpoint	microsoft office powerpoint	eq	2002
microsoft:office_powerpoint	microsoft office powerpoint	eq	2000