CVE-2009-0220

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 37%

probabilidade de exploração

37%top 2% das CVEs

exploração observada

nãonenhuma fonte reporta

Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via crafted formatting data for paragraphs in a file that uses a PowerPoint 4.0 native file format, related to (1) an incorrect calculation from a record header, or (2) an interget that is used to specify the number of bytes to copy, aka "Legacy File Format Vulnerability."

Produtos afetados

n/a · n/a

Referências

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=790 http://osvdb.org/54386 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 http://secunia.com/advisories/32428 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5610 http://www.securityfocus.com/bid/34833 http://www.securitytracker.com/id?1022205 http://www.us-cert.gov/cas/techalerts/TA09-132A.html http://www.vupen.com/english/advisories/2009/1290