CVE-2009-1534: Buffer Overflow
First published: Wed Aug 12 2009(Updated: )
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Visual Studio | =2003-sp1 | |
| Microsoft Office Web Components | =2000-sp3 | |
| Microsoft BizTalk Server | =2002 | |
| Microsoft Office Web Components | =xp-sp3 | |
| Microsoft Office | =xp-sp3 | |
| Microsoft Internet Security and Acceleration Server | =2006-sp1 | |
| Microsoft Internet Security and Acceleration Server | =2004-sp3 | |
| Microsoft Office Web Components | =2003-sp1 | |
| Microsoft Office | ||
| Microsoft Internet Security and Acceleration Server | =2004-sp3 | |
| Microsoft Office Web Components | =2003-sp3 | |
| Microsoft Office | =2003-sp3 | |
| Microsoft Internet Security and Acceleration Server | =2006-sp1 | |
| Microsoft BizTalk Server | =2002 | |
| Microsoft Visual Studio | =2003-sp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/35992
- http://osvdb.org/56916
- http://www.securitytracker.com/id?1022708
- http://www.us-cert.gov/cas/techalerts/TA09-223A.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6326
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043
Frequently Asked Questions
What is the severity of CVE-2009-1534?
CVE-2009-1534 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2009-1534?
To fix CVE-2009-1534, you should apply the latest security updates provided by Microsoft for the affected software.
Which software is affected by CVE-2009-1534?
CVE-2009-1534 affects Microsoft Office Web Components, Visual Studio .NET 2003 SP1, and several versions of Microsoft Office and BizTalk Server.
Can CVE-2009-1534 allow attackers to execute code remotely?
Yes, CVE-2009-1534 allows remote attackers to execute arbitrary code via crafted property values.
Is there a workaround for CVE-2009-1534?
There are no official workarounds for CVE-2009-1534; the best course of action is to update the software.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft visual studio
- version/microsoft visual studio/2003-sp1
- canonical/microsoft office web components
- version/microsoft office web components/2000-sp3
- canonical/microsoft biztalk server
- version/microsoft biztalk server/2002
- version/microsoft office web components/xp-sp3
- canonical/microsoft office
- version/microsoft office/xp-sp3
- canonical/microsoft internet security and acceleration server
- version/microsoft internet security and acceleration server/2006-sp1
- version/microsoft internet security and acceleration server/2004-sp3
- version/microsoft office web components/2003-sp1
- version/microsoft office web components/2003-sp3
- version/microsoft office/2003-sp3