cbcvebase.
CVE-2009-0221
published 2009-05-12

CVE-2009-0221: Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a…

PriorityP354critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
37.86%
98.4th percentile
Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration information for different slides" that contains a field that specifies a large number of records, which triggers an under-allocated buffer and a heap-based buffer overflow, aka "Integer Overflow Vulnerability."

Affected

2 ranges
VendorProductVersion rangeFixed in
microsoftoffice_powerpoint——
microsoftoffice_powerpoint——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.