IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.8Alta KEV

CVE-2009-0563Microsoft Office Buffer Overflow Vulnerability

microsoft office; microsoft office compatibility pack; microsoft office word viewer; microsoft open xml file format converter Publicada: (hace 17 años)

Explotación conocida — Microsoft Office Buffer Overflow Vulnerability

CISA confirmó el 08.06.2022 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 22.06.2022.

Acción requerida: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2009-0563

Descripción

Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a crafted tag containing an invalid length field, aka "Word Buffer Overflow Vulnerability."

Debilidad (CWE): CWE-787

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
microsoft office 2000
microsoft office compatibility pack 2007
microsoft office word viewer 2003
microsoft open xml file format converter —

Referencias y parches

Coincidencias CPE (NVD) (12)
  • cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*
  • cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*
  • cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:open_xml_file_format_converter:-:*:*:*:*:macos:*:*

CVE recientes del mismo producto — Microsoft Office / 365 Apps

8.8Alta
CVE-2026-108449

Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.