CVE-2009-1137

2009-05-1222:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-1137

microsoft office

powerpoint

legacy file format

vulnerability

memory corruption

remote execution

nvd

7.1 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.933 High

EPSS

Percentile

99.1%

JSON

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka “Legacy File Format Vulnerability,” a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-0227.

CPENameOperatorVersion
microsoft:office_powerpointmicrosoft office powerpointeq2003
microsoft:office_powerpointmicrosoft office powerpointeq2002
microsoft:office_powerpointmicrosoft office powerpointeq2000

CPE	Name	Operator	Version
microsoft:office_powerpoint	microsoft office powerpoint	eq	2003
microsoft:office_powerpoint	microsoft office powerpoint	eq	2002
microsoft:office_powerpoint	microsoft office powerpoint	eq	2000