Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2009-0563
HistoryJun 08, 2022 - 12:00 a.m.

Microsoft Office Buffer Overflow Vulnerability

2022-06-0800:00:00
CISA
www.cisa.gov
6
microsoft office
buffer overflow
vulnerability
remote code execution
word document
crafted tag

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.881

Percentile

98.7%

JSON

Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.

Related

checkpoint_advisories 1
attackerkb 1
prion 1
securityvulns 3
cve 1
thn 2
zdi 1
cvelist 1
nessus 3
threatpost 1
nvd 1
openvas 2
seebug 1
checkpoint_advisories
checkpoint_advisories
Microsoft Word Multiple SPRM Records Buffer Overflow (MS09-027; CVE-2009-0563)
2009-06-09 00:00:00
attackerkb
attackerkb
CVE-2009-0563
2009-06-10 00:00:00
prion
prion
Stack overflow
2009-06-10 18:00:00
securityvulns
securityvulns
ZDI-09-035: Microsoft Word Document Stack Based Buffer Overflow Vulnerability
2009-06-11 00:00:00
Microsoft Word buffer overflows
2009-06-14 00:00:00
Microsoft Security Bulletin MS09-027 - Critical
2009-06-11 00:00:00
cve
cve
CVE-2009-0563
2009-06-10 18:00:00
thn
thn
Chinese Government targets Uyghur group by malware attack
2013-02-14 17:50:00
Chinese Government targets Uyghur group by malware attack
2013-02-14 06:50:00
zdi
zdi
Microsoft Word Document Stack Based Buffer Overflow Vulnerability
2009-06-10 00:00:00
cvelist
cvelist
CVE-2009-0563
2009-06-10 17:37:00
nessus
nessus
Mac OS X OSX/Sabpab Trojan Detection
2012-04-20 00:00:00
MS09-027: Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (969514)
2009-06-10 00:00:00
MS09-017 / MS09-021 / MS09-027: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (967340 / 969462 / 969514) (Mac OS X)
2010-10-20 00:00:00
threatpost
threatpost
Researchers See Spike in Attacks Against Uyghur Users
2013-02-14 17:51:14
nvd
nvd
CVE-2009-0563
2009-06-10 18:00:00
openvas
openvas
Microsoft Office Word Remote Code Execution Vulnerabilities (969514)
2009-06-10 00:00:00
Microsoft Office Word Remote Code Execution Vulnerabilities (969514)
2009-06-10 00:00:00
seebug
seebug
Microsoft Word็•ธๅฝข่ฎฐๅฝ•่งฃๆžๆ ˆๆบขๅ‡บๆผๆดž(MS09-027)
2009-06-13 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.881

Percentile

98.7%

JSON
Related for CISA-KEV-CVE-2009-0563
checkpoint_advisories1attackerkb1prion1securityvulns3cve1thn2zdi1cvelist1nessus3threatpost1nvd1openvas2seebug1