Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-0556
HistoryApr 03, 2009 - 6:30 p.m.

CVE-2009-0556

2009-04-0318:30:00
CWE-94
[email protected]
web.nvd.nist.gov
11

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.932

Percentile

99.1%

JSON

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka β€œMemory Corruption Vulnerability.”

Affected configurations

Nvd
Node
microsoftoffice_powerpointMatch2004
OR
microsoftpowerpointMatch2000sp3
OR
microsoftpowerpointMatch2002sp3
OR
microsoftpowerpointMatch2003sp3
VendorProductVersionCPE
microsoftoffice_powerpoint2004cpe:2.3:a:microsoft:office_powerpoint:2004:*:*:*:*:*:*:*
microsoftpowerpoint2000cpe:2.3:a:microsoft:powerpoint:2000:sp3:*:*:*:*:*:*
microsoftpowerpoint2002cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*
microsoftpowerpoint2003cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*

References

Related

cve 1
saint 4
zdi 1
checkpoint_advisories 2
securityvulns 3
prion 1
cert 1
seebug 1
cvelist 1
nessus 1
openvas 6
cve
cve
CVE-2009-0556
2009-04-03 18:30:00
saint
saint
Microsoft PowerPoint invalid object reference vulnerability
2009-04-20 00:00:00
Microsoft PowerPoint invalid object reference vulnerability
2009-04-20 00:00:00
Microsoft PowerPoint invalid object reference vulnerability
2009-04-20 00:00:00
zdi
zdi
Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability
2009-05-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office PowerPoint Invalid Object Reference Code Execution (CVE-2009-0556)
2009-04-05 00:00:00
Microsoft PowerPoint TextHeaderAtom Freed Memory Corruption - Ver2 (CVE-2009-0556)
2014-03-03 00:00:00
securityvulns
securityvulns
ZDI-09-019: Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability
2009-05-13 00:00:00
Microsoft Power Point multiple security vulnerabilities
2009-06-11 00:00:00
Microsoft Security Bulletin MS09-017 - Critical Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (967340)
2009-05-12 00:00:00
prion
prion
Memory corruption
2009-04-03 18:30:00
cert
cert
Microsoft Office PowerPoint code execution vulnerability
2009-04-03 00:00:00
seebug
seebug
PowerPointη•Έε½’ζ–‡δ»Άθ§£ζžδ»£η ζ‰§θ‘ŒζΌζ΄ž
2009-04-08 00:00:00
cvelist
cvelist
CVE-2009-0556
2009-04-03 18:00:00
nessus
nessus
MS09-017: Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (967340)
2009-05-13 00:00:00
openvas
openvas
Microsoft PowerPoint File Parsing Remote Code Execution Vulnerability (967340)
2009-04-07 00:00:00
Microsoft PowerPoint File Parsing Remote Code Execution Vulnerability (967340)
2009-04-07 00:00:00
Ubuntu USN-774-1 (moin)
2009-06-05 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.932

Percentile

99.1%

JSON
Related for NVD:CVE-2009-0556
cve1saint4zdi1checkpoint_advisories2securityvulns3prion1cert1seebug1cvelist1nessus1openvas6