Microsoft · Office
CVE-2009-0556
Microsoft Office PowerPoint Code Injection Vulnerability
Cos'è
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."
CISA: Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.
Cosa fare
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Scadenza per le agenzie federali USA: 28 gennaio 2026
- Aggiunta all'elenco CISA
- 7 gennaio 2026
- Pubblicato
- 3 aprile 2009
- Gravità
- Alta 8,8 CVSS 3.1
- Probabilità di attacchi nei prossimi 30 giorni (EPSS)
- 67% tra il 0,7% più alto di tutte le vulnerabilità note
- Tipo di debolezza
- CWE-94
- Più dettagli
- NVD · CVE.org · CISA
Tutte le fonti (18)
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017
- http://www.zerodayinitiative.com/advisories/ZDI-09-019
- http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx
- http://www.vupen.com/english/advisories/2009/1290
- http://osvdb.org/53182
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49632
- http://www.securityfocus.com/bid/34351
- http://www.vupen.com/english/advisories/2009/0915
- http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx
- http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6279
- http://secunia.com/advisories/34572
- http://www.securitytracker.com/id?1021967
- http://www.us-cert.gov/cas/techalerts/TA09-132A.html
- http://www.microsoft.com/technet/security/advisory/969136.mspx
- http://www.kb.cert.org/vuls/id/627331
- http://www.securityfocus.com/archive/1/503453/100/0/threaded
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6204
Altre falle sfruttate di Microsoft
| Aggiunto | Vulnerabilità | Prodotto | Gravità | Probabilità di attacco |
|---|---|---|---|---|
| 14 apr 2026 | Remote Code Execution | Office | Alta 8,8 | 43% |
| 10 feb 2026 | Word Reliance on Untrusted Inputs in a Security Decision | Office | Alta 7,8 | 1,6% |
| 26 gen 2026 | Security Feature Bypass | Office | Alta 7,8 | 71% |
| 12 ago 2025 | Excel Remote Code Execution | Office | Alta 8,8 | 43% |
| 14 mar 2023 | Outlook Privilege Escalation | Office | Critica 9,8 | 97% |
| 14 feb 2023 | Publisher Security Feature Bypass | Office | Alta 7,3 | 12% |
| 8 giu 2022 | Object Record Corruption | Office | Alta 7,8 | 53% |
| 8 giu 2022 | Buffer Overflow | Office | Alta 7,8 | 60% |
Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.