NVD

Id
49741  
Name
CVE-2009-2496  
Description
Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Office Web Components Heap Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-12  
Modified Date
2010-08-21  
Seq
2009-2496  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251566 49741 CVE-2009-2496 oval:org.mitre.oval:def:5645  View
251567 49741 CVE-2009-2496 MS09-043  View
251568 49741 CVE-2009-2496 1022708  View
251569 49741 CVE-2009-2496 TA09-223A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41020 JVNDB-2009-002026 Microsoft Office の Office Web Components ActiveX Control におけるヒープベースのバッファオーバーフローの脆弱性 Microsoft Office の Office Web Components ActiveX Control には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-2496 39927 CVE-2009-2496 49741 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002026.html 2009-08-11 2009-09-25 View