Unscored severity · published Jun 11, 2009
CVE-2009-0202
Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a…
–
CVSS
23.6%
EPSS
No
On KEV
Description
Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified "layout information" that triggers a heap-based buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)23.6% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Office Powerpoint · Microsoft
2000; 2002 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0202
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0202
Vendor Advisory
http://secunia.com/advisories/35184
Vendor Advisory
http://secunia.com/secunia_research/2009-29/
securitytracker.com
http://securitytracker.com/id?1022369
www.osvdb.org
http://www.osvdb.org/54961
www.securityfocus.com
http://www.securityfocus.com/archive/1/504215/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/35275
More from Office Powerpoint
8.8
CVE-2009-0556
Microsoft Office PowerPoint Code Injection Vulnerability
–
CVE-2009-1137
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native…
–
CVE-2009-1131
Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with…
–
CVE-2009-1130
Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code…
–
CVE-2009-1129
Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute…