Buffer overflow in Microsoft Biztalk_server
CVE-2009-1534
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute…
Vulnerability class: Buffer Overflow
EPSS: 0.516 (98.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Biztalk_server — versions 2002
- Microsoft Isa_server — versions 2004, 2006
- Microsoft Office — versions 2003, xp
- Microsoft Office_web_components — versions 2000, 2003, xp
- Microsoft Visual_studio_.net — versions 2003
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secure@microsoft.com (x_refsource_OSVDB, vdb-entry)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (Patch, vdb-entry, x_refsource_BID)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
Frequently asked questions
- What is CVE-2009-1534?
- CVE-2009-1534 is a vulnerability in Microsoft Biztalk_server, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-08-12.
- Is CVE-2009-1534 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.