Vulnerability Intelligence Report
CVE-2009-1130
Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka "Heap Corruption Vulnerability."
No Active Exploit Signals
CVSS Base Score
9.3
HIGH
EPSS Probability:39.45%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| microsoft | office | 2004 |
| microsoft | office_powerpoint | 2002, 2003 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
39.453%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Microsoft Corporation · Vendor · USA |
| Reserved | 2009-03-25T00:00:00 |
| Published | 2009-05-12T22:00:00 |
| Patch Date | 2009-05-12 |
| Last Updated | 2024-08-07T05:04:47 |
Community Chatter & Buzz