CVE-2009-1129

CRITICAL 9.3CVE-2009-1129 · Published 12/05/2009 · updated 16/06/2026

Package	Affected versions	Patched versions
office powerpoint microsoft	`= 2000= 2002= 2003`	No fix yet

Description

Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.

References

labs.idefense.com/intelligence/vulnerabilities/display.php
osvdb.org/54387
secunia.com/advisories/32428 · Vendor Advisory
securityfocus.com/bid/34839
securitytracker.com/id
us-cert.gov/cas/techalerts/TA09-132A.html · US Government Resource
vupen.com/english/advisories/2009/1290 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free