Login Request a demo
Unscored severity · published May 12, 2009
CVE-2009-1129
Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute…
–
CVSS
35.7%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.
Exploitation
Is it being used?
Exploit prediction (EPSS)35.7% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Office Powerpoint · Microsoft
2000; 2002; 2003 · source: NVD
Affected product
OP
Office Powerpoint
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1129
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1129
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791
osvdb.org
http://osvdb.org/54387
Vendor Advisory
http://secunia.com/advisories/32428
www.securityfocus.com
http://www.securityfocus.com/bid/34839
www.securitytracker.com
http://www.securitytracker.com/id?1022205
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA09-132A.html
More from Office Powerpoint
8.8
CVE-2009-0556
Microsoft Office PowerPoint Code Injection Vulnerability
–
CVE-2009-0202
Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a…
–
CVE-2009-1137
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native…
–
CVE-2009-1131
Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with…
–
CVE-2009-1130
Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code…