CVE-2009-0222: microsoft office_powerpoint Code Injection

EPSS trend

Probability

31.63%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 31.63% on 20-09-2026

20-09-202620-10-2026

EPSS score

31.63%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

www.vupen.com/exploits/…X Refsource MISCVendor Advisory
www.securityfocus.com/bid/34831VDB EntryX Refsource BID
secunia.com/advisories/32428Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/1290VDB EntryX Refsource VUPEN
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017Vendor AdvisoryX Refsource MS
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6143VDB EntrySignatureX Refsource OVAL
www.securitytracker.com/id?1022205VDB EntryX Refsource SECTRACK
www.us-cert.gov/cas/techalerts/TA09-132A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
osvdb.org/54382VDB EntryX Refsource OSVDB
www.vupen.com/exploits/…X Refsource MISCVendor Advisory

Related vulnerabilities

CVE-2009-1131microsoftoffice_powerpoint35.93%17y ago12-05-2009 22:00Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with unspecified atoms in a PowerPoint file that triggers memory corruption, aka "Data Out of Bounds Vulnerability."CVE-2009-1137microsoftoffice_powerpoint31.63%17y ago12-05-2009 22:00Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-0227.CVE-2009-1128microsoftoffice_powerpoint27.47%17y ago12-05-2009 22:00Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1129.CVE-2009-1130microsoftoffice+139.45%17y ago12-05-2009 22:00Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka "Heap Corruption Vulnerability."CVE-2009-1129microsoftoffice_powerpoint35.72%17y ago12-05-2009 22:00Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.CVE-2009-0226microsoftoffice_powerpoint34.79%17y ago12-05-2009 22:00Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0227, and CVE-2009-1137.

All vulnerabilities inoffice_powerpoint

CVE-2009-0222: microsoft office_powerpoint Code Injection

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References