Unscored severity · published Jun 10, 2009
CVE-2009-1533
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote…
–
CVSS
35.6%
EPSS
No
On KEV
Description
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)35.6% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2000; 2003 · source: NVD
OX
Office XP · Microsoft
sp3 · source: NVD
WO
Works · Microsoft
8.5; 9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1533
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1533
blogs.technet.com
http://blogs.technet.com/srd/archive/2009/06/09/ms09-024.aspx
jvn.jp
http://jvn.jp/en/jp/JVN70858401/index.html
osvdb.org
http://osvdb.org/54939
secunia.com
http://secunia.com/advisories/35371
www.securityfocus.com
http://www.securityfocus.com/bid/35184
www.securitytracker.com
http://www.securitytracker.com/id?1022354
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability