CVE-2009-0562
Last modified
CVE-2009-0562 is a vulnerability of currently unknown severity. The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 does not properly allocate memory, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger "system state" corruption, aka "Office Web Components Memory Allocation Vulnerability.". EPSS estimates a 25.65% chance of exploitation in the next 30 days.
Description
The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 does not properly allocate memory, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger "system state" corruption, aka "Office Web Components Memory Allocation Vulnerability."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Isa Server | 2004 | Sp3 |
| Microsoft | Isa Server | 2006 | Sp1 |
| Microsoft | Office | All versions | — |
| Microsoft | Office | 2003 | Sp3 |
| Microsoft | Office | xp | Sp3 |
| Microsoft | Office Web Components | 2000 | Sp3 |
| Microsoft | Office Web Components | 2003 | Sp1 |
| Microsoft | Office Web Components | xp | Sp3 |
References
- http://www.us-cert.gov/cas/techalerts/TA09-223A.htmlUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA09-223A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-0562?
How severe is CVE-2009-0562?
How do I fix CVE-2009-0562?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-0556Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3…8.8
- CVE-2009-0557Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 20…7.8
- CVE-2009-0558Array index error in Excel in Microsoft Office 2000 SP3 and …
- CVE-2009-0559Stack-based buffer overflow in Excel in Microsoft Office 200…
- CVE-2009-0560Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 20…
- CVE-2009-0561Integer overflow in Excel in Microsoft Office 2000 SP3, Offi…
- CVE-2009-0563Stack-based buffer overflow in Microsoft Office Word 2002 SP…7.8
- CVE-2009-0565Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3,…
- CVE-2009-0566Microsoft Office Publisher 2007 SP1 does not properly calcul…
- CVE-2009-0567Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2009-0568The RPC Marshalling Engine (aka NDR) in Microsoft Windows 20…
- CVE-2009-0569Buffer overflow in Becky! Internet Mail 2.48.02 and earlier …
Are you affected by CVE-2009-0562?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST