Unscored severity · published Aug 12, 2009
CVE-2009-1534
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and…
–
CVSS
51.6%
EPSS
No
On KEV
Description
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)51.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2003; xp · source: NVD
IS
Isa Server · Microsoft
2004; 2004; 2006; 2006 · source: NVD
OW
Office Web Components · Microsoft
2000; 2003; 2003; xp · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1534
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1534
osvdb.org
http://osvdb.org/56916
Patch
http://www.securityfocus.com/bid/35992
www.securitytracker.com
http://www.securitytracker.com/id?1022708
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA09-223A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6326
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability