CVE-2009-2496
Microsoft Office OWC10.Spreadsheet ActiveX BorderAround() Heap Corruption Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Office Web Components Heap Corruption Vulnerability."
Desbordamiento de búfer basado en memoria dinámica (heap) en el Componentes Office Web ActiveX Control en Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 para el 2007 Microsoft Office System, Internet Security y Acceleration (ISA) Server 2004 SP3 y 2006 SP1, y Office Small Business Accounting 2006 permite a los atacantes remotos ejecutar arbitrariamente código a través de parámetros no especificados a métodos desconocidos, también conocidos como "Vulnerabilidad de corrupción de memoria dinámica en componentes de Office Web".
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page.
The specific vulnerability exists in the OWC10.Spreadsheet.10 ActiveX control installed by Microsoft Office. By accessing specific methods in a certain order heap corruption occurs leading to remote code execution. If exploited, complete control of the affected system can be achieved under the rights of the currently logged in user.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2009-07-17 CVE Reserved
- 2009-08-11 CVE Published
- 2024-08-07 CVE Updated
- 2024-11-05 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id?1022708 | Vdb Entry | |
| http://www.us-cert.gov/cas/techalerts/TA09-223A.html | Third Party Advisory | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5645 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043 | 2018-10-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | Biztalk Server Search vendor "Microsoft" for product "Biztalk Server" | 2002 Search vendor "Microsoft" for product "Biztalk Server" and version "2002" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Internet Security And Acceleration Server Search vendor "Microsoft" for product "Internet Security And Acceleration Server" | 2004 Search vendor "Microsoft" for product "Internet Security And Acceleration Server" and version "2004" | sp3, enterprise |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Internet Security And Acceleration Server Search vendor "Microsoft" for product "Internet Security And Acceleration Server" | 2004 Search vendor "Microsoft" for product "Internet Security And Acceleration Server" and version "2004" | sp3, standard |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Internet Security And Acceleration Server Search vendor "Microsoft" for product "Internet Security And Acceleration Server" | 2006 Search vendor "Microsoft" for product "Internet Security And Acceleration Server" and version "2006" | sp1, enterprise |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Internet Security And Acceleration Server Search vendor "Microsoft" for product "Internet Security And Acceleration Server" | 2006 Search vendor "Microsoft" for product "Internet Security And Acceleration Server" and version "2006" | sp1, std |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | - | small_business_accounting_2006 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2003 Search vendor "Microsoft" for product "Office" and version "2003" | sp3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | xp Search vendor "Microsoft" for product "Office" and version "xp" | sp3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Web Components Search vendor "Microsoft" for product "Office Web Components" | 2000 Search vendor "Microsoft" for product "Office Web Components" and version "2000" | sp3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Web Components Search vendor "Microsoft" for product "Office Web Components" | 2003 Search vendor "Microsoft" for product "Office Web Components" and version "2003" | sp1, 2007_microsoft_office |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Web Components Search vendor "Microsoft" for product "Office Web Components" | 2003 Search vendor "Microsoft" for product "Office Web Components" and version "2003" | sp3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Web Components Search vendor "Microsoft" for product "Office Web Components" | xp Search vendor "Microsoft" for product "Office Web Components" and version "xp" | sp3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual Studio .net Search vendor "Microsoft" for product "Visual Studio .net" | 2003 Search vendor "Microsoft" for product "Visual Studio .net" and version "2003" | sp1 |
Affected
| ||||||