← Voltar para CVEs

CVE-2009-0220

N/A

Descricao

Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via crafted formatting data for paragraphs in a file that uses a PowerPoint 4.0 native file format, related to (1) an incorrect calculation from a record header, or (2) an interget that is used to specify the number of bytes to copy, aka "Legacy File Format Vulnerability."

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado5/12/2009

Ultima modificacao4/23/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

microsoft:office_powerpoint

Fraquezas (CWE)

CWE-119

Referencias

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=790(secure@microsoft.com)

http://osvdb.org/54386(secure@microsoft.com)

http://secunia.com/advisories/32428(secure@microsoft.com)

http://www.securityfocus.com/bid/34833(secure@microsoft.com)

http://www.securitytracker.com/id?1022205(secure@microsoft.com)

http://www.us-cert.gov/cas/techalerts/TA09-132A.html(secure@microsoft.com)

http://www.vupen.com/english/advisories/2009/1290(secure@microsoft.com)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017(secure@microsoft.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5610(secure@microsoft.com)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=790(af854a3a-2127-422b-91ae-364da2661108)

http://osvdb.org/54386(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/32428(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/34833(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1022205(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA09-132A.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2009/1290(af854a3a-2127-422b-91ae-364da2661108)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5610(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.