CVE-2009-3135

Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word…

published November 11, 2009

CVSS
—
EPSS
36%
Percentile
98.5
In the wild
Unconfirmed
What it is

⚠️ A well-crafted Word document could unleash chaos! This stack-based buffer overflow in Microsoft Office Word 2002, 2003, and their Mac counterparts allows nefarious attackers to execute arbitrary code simply by manipulating the File Information Block (FIB). Think of it like sending a seemingly harmless package with a hidden explosive device inside. The document appears safe on the outside, but when opened, it can wreak havoc, compromising your system and data. If exploited, an attacker could gain control of the affected system, leading to potentially devastating consequences such as unauthorized access to sensitive information, installation of malicious software, or even complete takeover of your device. The risk of this vulnerability cannot be downplayed, as it makes systems ripe for exploitation.

Put simply

Think of it like sending a seemingly harmless package with a hidden explosive device inside. The document appears safe on the outside, but when opened, it can wreak havoc, compromising your system and data. This vulnerability arises from improper handling of the File Information Block (FIB) structure, allowing remote attackers to craft special Word documents that can overflow the stack and execute arbitrary code when opened. It affects several versions of Microsoft Office and Word Viewers, making it a broad-reaching concern.

What to do

If exploited, an attacker could gain control of the affected system, leading to potentially devastating consequences such as unauthorized access to sensitive information, installation of malicious software, or even complete takeover of your device. The risk of this vulnerability cannot be downplayed, as it makes systems ripe for exploitation. To safeguard against this vulnerability, users should upgrade to the latest versions of Microsoft Office that have addressed this issue. Regularly patching your software and being cautious about opening unsolicited Word documents can also mitigate the risk. You've got this! Stay vigilant, keep your software updated, and you'll keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.35792 · 98.5th percentile
Published
2009-11-11T19:00Z
EPSS history
Timeline
  • 11 NOV 19:00Z
    Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word…
    cvelistv5