CVE-2009-1128
published 2009-05-12CVE-2009-1128: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a…
PriorityP352critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
27.47%
97.8th percentile
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1129.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | office_powerpoint | — | — |
| microsoft | office_powerpoint | — | — |
| microsoft | office_powerpoint | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rrpm-xwg2-r59h: Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32
ghsa_unreviewed·2022-05-02·CVSS 9.3
CVE-2009-1129 [CRITICAL] CWE-119 GHSA-rrpm-xwg2-r59h: Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32
Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.
GHSA
GHSA-2gc6-52qh-cwwj: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that u
ghsa_unreviewed·2022-05-02·CVSS 9.3
CVE-2009-1128 [CRITICAL] CWE-94 GHSA-2gc6-52qh-cwwj: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that u
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1129.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/32428http://www.securityfocus.com/bid/34837http://www.securitytracker.com/id?1022205http://www.us-cert.gov/cas/techalerts/TA09-132A.htmlhttp://www.vupen.com/english/advisories/2009/1290https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5416http://secunia.com/advisories/32428http://www.securityfocus.com/bid/34837http://www.securitytracker.com/id?1022205http://www.us-cert.gov/cas/techalerts/TA09-132A.htmlhttp://www.vupen.com/english/advisories/2009/1290https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5416
2009-05-12
Published