critical9.3Public exploit code
CVE-2009-1534
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft OWC Spreadsheet - HTMLURL Buffer Overflow (MS09-043) (Metasploit)2010-04-30 · remote · windows · Verified
Impact
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Isa Server | Versions 2004, 2006 |
| Microsoft | Office | All versions Versions 2003, xp |
| Microsoft | Office Web Components | Versions 2000, 2003, xp |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/56916
- http://www.securityfocus.com/bid/35992
- http://www.securitytracker.com/id?1022708
- http://www.us-cert.gov/cas/techalerts/TA09-223A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6326
- http://osvdb.org/56916
- http://www.securityfocus.com/bid/35992
- http://www.securitytracker.com/id?1022708
- http://www.us-cert.gov/cas/techalerts/TA09-223A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6326