CVE-2009-1533

2009-06-1018:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-1533

buffer overflow

works for windows

microsoft office

remote code execution

memory corruption

vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.864 High

EPSS

Percentile

98.6%

JSON

Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka “File Converter Buffer Overflow Vulnerability.”

Affected configurations

NVD

Node

microsoftofficeMatch2000sp3

microsoftofficeMatch2003sp3

microsoftoffice_xpMatchsp3

microsoftworksMatch8.5

microsoftworksMatch9.0

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2000
microsoft:officemicrosoft officeeq2003
microsoft:office_xpmicrosoft office xpeqsp3
microsoft:worksmicrosoft workseq8.5
microsoft:worksmicrosoft workseq9.0

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	2000
microsoft:office	microsoft office	eq	2003
microsoft:office_xp	microsoft office xp	eq	sp3
microsoft:works	microsoft works	eq	8.5
microsoft:works	microsoft works	eq	9.0