CVE-2009-0223: Code Injection
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0223?
CVE-2009-0223 has a critical severity level due to its potential for remote code execution.
How do I fix CVE-2009-0223?
The recommended fix for CVE-2009-0223 is to update Microsoft PowerPoint to the latest supported version that is no longer affected by this vulnerability.
What versions of Microsoft PowerPoint are affected by CVE-2009-0223?
CVE-2009-0223 affects Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3.
What type of attack does CVE-2009-0223 enable?
CVE-2009-0223 enables remote attackers to execute arbitrary code through crafted sound data.
What is the nature of the vulnerability described in CVE-2009-0223?
CVE-2009-0223 is a memory corruption vulnerability stemming from the handling of PowerPoint 4.0 native file format.