Unscored severity · published May 12, 2009
CVE-2009-0224
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008…
–
CVSS
30.1%
EPSS
No
On KEV
Description
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML File Format Converter for Mac; Microsoft Works 8.5 and 9.0; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly validate PowerPoint files, which allows remote attackers to execute arbitrary code via multiple crafted BuildList records that include ChartBuild containers, which triggers memory corruption, aka "Memory Corruption Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)30.1% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Compatibility Pack Word Excel Powerpoint · Microsoft
2007; 2007 · source: NVD
OC
Office Compatibility Pack For Word Excel Ppt 2007 · Microsoft
All versions, or not specified · source: NVD
OP
Office Powerpoint · Microsoft
2000; 2002; 2003; 2007 · source: NVD
OP
Office Powerpoint Viewer · Microsoft
2003; 2007; 2007 · source: NVD
OX
Open Xml File Format Converter · Microsoft
All versions, or not specified · source: NVD
PO
Powerpoint · Microsoft
2004; 2008 · source: NVD
WO
Works · Microsoft
8.5; 9.0 · source: NVD
Affected product
CP
Compatibility Pack Word Excel Powerpoint
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0224
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0224
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=793
secunia.com
http://secunia.com/advisories/32428
www.securityfocus.com
http://www.securityfocus.com/bid/34879
www.securitytracker.com
http://www.securitytracker.com/id?1022205
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA09-132A.html
www.vupen.com
http://www.vupen.com/english/advisories/2009/1290
More from Compatibility Pack Word Excel Powerpoint
–
CVE-2009-3134
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel…
–
CVE-2009-3133
Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a spreadsheet…
–
CVE-2009-3132
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel…
–
CVE-2009-3131
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel…
–
CVE-2009-3130
Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute…