PT-2009-3213 · Microsoft · Office Word+3

Nicolas Joly · Published 2009-06-10 · Updated 2018-10-12 · CVE-2009-0565

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Word versions 2000 SP3, 2002 SP3, and 2007 SP1 and SP2 Microsoft Office for Mac versions 2004 and 2008 Open XML File Format Converter for Mac (affected versions not specified) Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats versions SP1 and SP2

Description A buffer overflow issue allows remote attackers to execute arbitrary code via a Word document with a malformed record that triggers memory corruption. This vulnerability exists in the way that Microsoft Office Word handles a specially crafted Word file, potentially allowing an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Office Word versions 2000 SP3, 2002 SP3, and 2007 SP1 and SP2, update to a version that includes the fix for this issue. For Microsoft Office for Mac versions 2004 and 2008, update to a version that includes the fix for this issue. For Open XML File Format Converter for Mac, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats versions SP1 and SP2, update to a version that includes the fix for this issue.

Exploit

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-0565

Affected Products

Office Compatibility Pack For Word

Office Word

Office For Mac

Open Xml File Format Converter For Mac

References · 13

• 🔥 https://exploit-db.com/exploits/14693 · Exploit
• 🔥 https://exploit-db.com/exploits/17177 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0565 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-0565 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027 · Vendor Advisory
• http://securityfocus.com/bid/35190 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-027 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6334 · Note
• http://vupen.com/english/advisories/2009/1546 · Note
• http://osvdb.org/54960 · Note
• http://us-cert.gov/cas/techalerts/TA09-160A.html · Note
• http://securityreason.com/securityalert/8206 · Note
• http://securitytracker.com/id?1022356 · Note