CVE-2009-0220

Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote…

published May 12, 2009

CVSS
—
EPSS
37%
Percentile
98.5
In the wild
Unconfirmed
What it is

⚠️ A seemingly innocent PowerPoint file could be a trojan horse! This vulnerability lets attackers run arbitrary code just by opening a crafted presentation. 🤯 Think of it like a restaurant serving a special dish with a secret ingredient — except when you take a bite, it triggers chaos in the kitchen instead of delighting your taste buds! An attacker could exploit this flaw to take control over your system simply by enticing someone to open a malicious PowerPoint file. Once the code is executed, they could steal data, install malware, or wreak havoc with your computer’s operations!

Put simply

Think of it like a restaurant serving a special dish with a secret ingredient — except when you take a bite, it triggers chaos in the kitchen instead of delighting your taste buds! This vulnerability arises from multiple stack-based buffer overflows in the PowerPoint 4.0 importer within older versions of Microsoft Office. Incorrect calculations from a record header and an integer used for specifying the number of bytes to copy create opportunities for remote code execution.

What to do

An attacker could exploit this flaw to take control over your system simply by enticing someone to open a malicious PowerPoint file. Once the code is executed, they could steal data, install malware, or wreak havoc with your computer’s operations! To protect yourself, ensure that you're not using these older versions of Microsoft Office (2000 SP3, 2002 SP3, or 2003 SP3). If you must use them, consider disabling opening PowerPoint 4.0 native files or upgrading to a supported version. Regularly update your software for security patches. You've got this! Stay vigilant and keep your software up to date for that extra layer of security. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.37107 · 98.5th percentile
Published
2009-05-12T22:00Z
EPSS history
Timeline
  • 12 MAY 22:00Z
    Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote…
    cvelistv5