CVE-2009-1129

Microsoft Office PowerPoint 2000/2002/2003 SP3 - RCE via PP7X32.DLL Buffer Overflow

Title source: llm

Description

Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32428

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/1290

Third Party Advisory third-party-advisory x_refsource_idefense

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1022205

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA09-132A.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/34839

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/54387

Scores

EPSS 0.3572

EPSS Percentile 98.3%

Details

CWE

CWE-119

Status published

Products (3)

microsoft/office_powerpoint 2000 sp3

microsoft/office_powerpoint 2002 sp3

microsoft/office_powerpoint 2003 sp3

Published May 12, 2009

Tracked Since Feb 18, 2026