CVE-2009-1129

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 36%

exploitation probability

36%top 2% of all CVEs

observed exploitation

nono source reports it

Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.

Affected products

n/a · n/a

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791 http://osvdb.org/54387 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 http://secunia.com/advisories/32428 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176 http://www.securityfocus.com/bid/34839 http://www.securitytracker.com/id?1022205 http://www.us-cert.gov/cas/techalerts/TA09-132A.html http://www.vupen.com/english/advisories/2009/1290