CVE-2009-3135

high · 9.3

Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File Information Block (FIB) structure, aka "Microsoft Office Word File Information Memory Corruption Vulnerability."

9.3

CVSS

35.8%

EPSS (exploit prob.)

98th

EPSS percentile

2009-11-11

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
microsoft	office	2004
microsoft	office	2008
microsoft	office_word	2002
microsoft	office_word	2003
microsoft	office_word_viewer	all versions
microsoft	office_word_viewer	2003
microsoft	open_xml_file_format_converter	all versions

Check a specific version with /api/v1/cve/match.

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=831
http://osvdb.org/59857
http://secunia.com/advisories/37277
http://www.securityfocus.com/bid/36950
http://www.securitytracker.com/id?1023158
http://www.us-cert.gov/cas/techalerts/TA09-314A.html
http://www.vupen.com/english/advisories/2009/3194
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-068
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6555
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=831
http://osvdb.org/59857
http://secunia.com/advisories/37277
http://www.securityfocus.com/bid/36950
http://www.securitytracker.com/id?1023158
http://www.us-cert.gov/cas/techalerts/TA09-314A.html
http://www.vupen.com/english/advisories/2009/3194
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-068
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6555

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-3135