Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-0556

Опубликовано: 03 апр. 2009
Источник: nvd
CVSS3: 8.8
CVSS2: 9.3
EPSS Высокий

Описание

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office_powerpoint:2004:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:powerpoint:2000:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*

EPSS

Процентиль: 99%
0.76763
Высокий

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-94
CWE-94

Связанные уязвимости

CVSS3: 8.8
github
почти 4 года назад

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

EPSS

Процентиль: 99%
0.76763
Высокий

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-94
CWE-94