← Database

CVE-2009-0556

HIGH CVSS: 8.8 Published: 2009-04-03 Modified: 2026-06-16

Description

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

Affected Platforms

Microsoft PowerpointMicrosoft Office Powerpoint

Weakness Type

CWE-94, CWE-94

References