CVE-2009-0220: Buffer Overflow
Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via crafted formatting data for paragraphs in a file that uses a PowerPoint 4.0 native file format, related to (1) an incorrect calculation from a record header, or (2) an interget that is used to specify the number of bytes to copy, aka "Legacy File Format Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0220?
CVE-2009-0220 is classified as a critical vulnerability that can allow remote code execution.
How do I fix CVE-2009-0220?
To fix CVE-2009-0220, users should apply the latest security patches provided by Microsoft for affected versions of PowerPoint.
Which versions of Microsoft PowerPoint are affected by CVE-2009-0220?
CVE-2009-0220 affects Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3.
What type of attack does CVE-2009-0220 facilitate?
CVE-2009-0220 facilitates remote code execution attacks through crafted PowerPoint files.
How can I detect if my system is vulnerable to CVE-2009-0220?
You can detect vulnerability to CVE-2009-0220 by checking if you are using an unpatched version of the specified Microsoft PowerPoint editions.