NVD

Id
47887  
Name
CVE-2009-0556  
Description
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-03  
Modified Date
2010-08-21  
Seq
2009-0556  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239926 47887 CVE-2009-0556 http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx  View
239927 47887 CVE-2009-0556 http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx  View
239928 47887 CVE-2009-0556 http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx  View
239929 47887 CVE-2009-0556 oval:org.mitre.oval:def:6204  View
239930 47887 CVE-2009-0556 oval:org.mitre.oval:def:6279  View
239931 47887 CVE-2009-0556 VU#627331  View
239932 47887 CVE-2009-0556 http://www.microsoft.com/technet/security/advisory/969136.mspx  View
239933 47887 CVE-2009-0556 MS09-017  View
239934 47887 CVE-2009-0556 20090512 ZDI-09-019: Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability  View
239935 47887 CVE-2009-0556 34351  View
239936 47887 CVE-2009-0556 1021967  View
239937 47887 CVE-2009-0556 TA09-132A  View
239938 47887 CVE-2009-0556 ADV-2009-0915  View
239939 47887 CVE-2009-0556 ADV-2009-1290  View
239940 47887 CVE-2009-0556 http://www.zerodayinitiative.com/advisories/ZDI-09-019  View
239941 47887 CVE-2009-0556 powerpoint-unspecified-code-execution(49632)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40179 JVNDB-2009-001185 Microsoft Office PowerPoint に任意のコードが実行される脆弱性 Microsoft PowerPoint には第三者が任意のコードを実行可能な脆弱性が存在します。 CVE-2009-0556 37987 CVE-2009-0556 47887 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001185.html 2009-04-02 2009-06-25 View