CVE-2009-1129
Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 35.7%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 35.72% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- microsoft/office powerpoint
- Source
- secure@microsoft.com
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791
- http://osvdb.org/54387
- http://secunia.com/advisories/32428Vendor Advisory
- http://www.securityfocus.com/bid/34839
- http://www.securitytracker.com/id?1022205
- http://www.us-cert.gov/cas/techalerts/TA09-132A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2009/1290Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791
- http://osvdb.org/54387
- http://secunia.com/advisories/32428Vendor Advisory
- http://www.securityfocus.com/bid/34839
- http://www.securitytracker.com/id?1022205
- http://www.us-cert.gov/cas/techalerts/TA09-132A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2009/1290Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.