CVE-2009-1129: microsoft office_powerpoint
Vulnerability summary
CVE-2009-1129 is a high (CVSS 9.3) vulnerability in microsoft office_powerpoint. EPSS estimates a 35.72% chance of exploitation in the next 30 days, higher than 98.4% of scored vulnerabilities.
Timeline
- 12-05-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
35.72%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 35.72% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microsoft1 product
- office_powerpoint2000:sp3 | 2002:sp3 | 2003:sp3
1 vendor · 1 product
References
9 links- labs.idefense.com/intelligence/vulnerabilities/display.php?id=791Third Party AdvisoryX Refsource IDEFENSE
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176VDB EntrySignatureX Refsource OVAL
- docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017Vendor AdvisoryX Refsource MS
- www.us-cert.gov/cas/techalerts/TA09-132A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource