CVE-2009-0563

HIGH KEV

Microsoft Office Word - Stack-based Buffer Overflow via Crafted Tag with Invalid Length Field

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2009-0563 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 8, 2022.

Description

Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a crafted tag containing an invalid length field, aka "Word Buffer Overflow Vulnerability."

References (10)

Core 10
Core References
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35188
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/54959
Third Party Advisory, VDB Entry x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-09-035
Broken Link, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA09-160A.html
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1022356
Patch, Vendor Advisory vendor-advisory x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1546
Broken Link, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/504204/100/0/threaded

Scores

CVSS v3 7.8
EPSS 0.7992
EPSS Percentile 99.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation active
Automatable no
Technical Impact total

Details

CISA KEV 2022-06-08
VulnCheck KEV 2013-03-14
InTheWild.io 2012-04-14
ENISA EUVD EUVD-2009-0567
CWE
CWE-787
Status published
Products (10)
microsoft/office 2000 sp3
microsoft/office 2003 sp3
microsoft/office 2004
microsoft/office 2007 sp1 (2 CPE variants)
microsoft/office 2008
microsoft/office xp sp3
microsoft/office_compatibility_pack 2007 sp1 (2 CPE variants)
microsoft/office_word_viewer
microsoft/office_word_viewer 2003 sp3
microsoft/open_xml_file_format_converter
Published Jun 10, 2009
KEV Added Jun 08, 2022
Tracked Since Feb 18, 2026