← Back to CVEs

CVE-2009-1534

N/A

Description

Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability."

CVE Details

CVSS v3.1 ScoreN/A

Published8/12/2009

Last Modified4/23/2026

Sourcenvd

Honeypot Sightings0

Affected Products

microsoft:biztalk_servermicrosoft:isa_servermicrosoft:officemicrosoft:office_web_componentsmicrosoft:visual_studio_.net

Weaknesses (CWE)

CWE-119

References

http://osvdb.org/56916(secure@microsoft.com)

http://www.securityfocus.com/bid/35992(secure@microsoft.com)

http://www.securitytracker.com/id?1022708(secure@microsoft.com)

http://www.us-cert.gov/cas/techalerts/TA09-223A.html(secure@microsoft.com)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043(secure@microsoft.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6326(secure@microsoft.com)

http://osvdb.org/56916(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/35992(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1022708(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA09-223A.html(af854a3a-2127-422b-91ae-364da2661108)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6326(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.