CVE-2009-1129

2009-05-1222:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-1129

microsoft office

powerpoint

buffer overflow

remote code execution

vulnerability

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.931 High

EPSS

Percentile

99.0%

JSON

Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka “PP7 Memory Corruption Vulnerability,” a different vulnerability than CVE-2009-1128.

CPENameOperatorVersion
microsoft:office_powerpointmicrosoft office powerpointeq2003
microsoft:office_powerpointmicrosoft office powerpointeq2002
microsoft:office_powerpointmicrosoft office powerpointeq2000

CPE	Name	Operator	Version
microsoft:office_powerpoint	microsoft office powerpoint	eq	2003
microsoft:office_powerpoint	microsoft office powerpoint	eq	2002
microsoft:office_powerpoint	microsoft office powerpoint	eq	2000