Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-3135
HistoryNov 11, 2009 - 7:30 p.m.

CVE-2009-3135

2009-11-1119:30:00
CWE-119
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.944 High

EPSS

Percentile

99.2%

JSON

Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File Information Block (FIB) structure, aka โ€œMicrosoft Office Word File Information Memory Corruption Vulnerability.โ€

Affected configurations

NVD
Node
microsoftofficeMatch2004mac
OR
microsoftofficeMatch2008mac
OR
microsoftoffice_wordMatch2002sp3
OR
microsoftoffice_wordMatch2003sp3
OR
microsoftoffice_word_viewer
OR
microsoftoffice_word_viewerMatch2003sp3
OR
microsoftopen_xml_file_format_convertermac

Related

seebug 1
cvelist 1
nessus 2
securityvulns 3
prion 1
cve 1
openvas 2
checkpoint_advisories 2
seebug
seebug
Microsoft Word่ฎฐๅฝ•่งฃๆžๆ ˆๆบขๅ‡บๆผๆดž๏ผˆMS09-068๏ผ‰
2009-11-11 00:00:00
cvelist
cvelist
CVE-2009-3135
2009-11-11 19:00:00
nessus
nessus
MS09-068: Vulnerability in Microsoft Office Word Could Allow Remote Code Execution (976307)
2009-11-10 00:00:00
MS09-067 / MS09-068: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (972652 / 976307) (Mac OS X)
2010-10-20 00:00:00
securityvulns
securityvulns
Microsoft Word memory corruption
2009-11-11 00:00:00
Microsoft Security Bulletin MS09-068 - Important Vulnerability in Microsoft Office Word Could Allow Remote Code Execution (976307)
2009-11-11 00:00:00
iDefense Security Advisory 11.10.09: Microsoft Word FIB Processing Stack Buffer Overflow Vulnerability
2009-11-11 00:00:00
prion
prion
Stack overflow
2009-11-11 19:30:00
cve
cve
CVE-2009-3135
2009-11-11 19:30:00
openvas
openvas
Microsoft Office Word Remote Code Execution Vulnerability (976307)
2009-11-11 00:00:00
Microsoft Office Word Remote Code Execution Vulnerability (976307)
2009-11-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Word Legacy File Remote Code Execution (MS09-068) - Ver2 (CVE-2009-3135)
2014-03-03 00:00:00
Microsoft Office Word Legacy File Remote Code Execution (MS09-068; CVE-2009-3135)
2009-11-10 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.944 High

EPSS

Percentile

99.2%

JSON
Related for NVD:CVE-2009-3135
seebug1cvelist1nessus2securityvulns3prion1cve1openvas2checkpoint_advisories2