CVE-2009-1533

2009-06-1018:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-1533

buffer overflow

works for windows

microsoft office

remote code execution

memory corruption

vulnerability

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.877 High

EPSS

Percentile

98.6%

JSON

Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka “File Converter Buffer Overflow Vulnerability.”

CPENameOperatorVersion
microsoft:office_xpmicrosoft office xpeqsp3
microsoft:worksmicrosoft workseq8.5
microsoft:worksmicrosoft workseq9.0
microsoft:officemicrosoft officeeq2003
microsoft:officemicrosoft officeeq2000

CPE	Name	Operator	Version
microsoft:office_xp	microsoft office xp	eq	sp3
microsoft:works	microsoft works	eq	8.5
microsoft:works	microsoft works	eq	9.0
microsoft:office	microsoft office	eq	2003
microsoft:office	microsoft office	eq	2000