CVE-2009-1130

2009-05-1222:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-1130

microsoft office

powerpoint

heap-based buffer overflow

remote code execution

vulnerability

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.818 High

EPSS

Percentile

98.3%

JSON

Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka “Heap Corruption Vulnerability.”

CPENameOperatorVersion
microsoft:office_powerpointmicrosoft office powerpointeq2003
microsoft:officemicrosoft officeeq2004
microsoft:office_powerpointmicrosoft office powerpointeq2002

CPE	Name	Operator	Version
microsoft:office_powerpoint	microsoft office powerpoint	eq	2003
microsoft:office	microsoft office	eq	2004
microsoft:office_powerpoint	microsoft office powerpoint	eq	2002