Microsoft Office Object Record Corruption Vulnerability

概要

参考情報

• osvdb.org/54953 · Broken Link
• securityfocus.com/bid/35241 · Broken Link
• securitytracker.com/id · Broken Link
• us-cert.gov/cas/techalerts/TA09-160A.html · Broken Link
• vupen.com/english/advisories/2009/1540 · Broken Link
• docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 · Patch
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5564 · Broken Link
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2009-0557

office のその他の脆弱性

• CVE-2026-70105高 7.5Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-55054中 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-47293高 7.0Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
• CVE-2026-42832中 5.5Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
• CVE-2026-42831高 7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.