Vulnerability Details CVE-2009-0202
Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified "layout information" that triggers a heap-based buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.475
EPSS Ranking 97.5%
CVSS Severity
CVSS v2 Score 9.3
References
- http://secunia.com/advisories/35184
- http://secunia.com/secunia_research/2009-29/
- http://securitytracker.com/id?1022369
- http://www.osvdb.org/54961
- http://www.securityfocus.com/archive/1/504215/100/0/threaded
- http://www.securityfocus.com/bid/35275
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51034
- http://secunia.com/advisories/35184
- http://secunia.com/secunia_research/2009-29/
- http://securitytracker.com/id?1022369
- http://www.osvdb.org/54961
- http://www.securityfocus.com/archive/1/504215/100/0/threaded
- http://www.securityfocus.com/bid/35275
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51034
Products affected by CVE-2009-0202
-
cpe:2.3:a:microsoft:office_powerpoint:2000
-
cpe:2.3:a:microsoft:office_powerpoint:2002