Buffer overflow in Microsoft Biztalk_server
CVE-2009-2496
Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office…
Vulnerability class: Buffer Overflow
EPSS: 0.295 (98.0th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Biztalk_server — versions 2002
- Microsoft Internet_security_and_acceleration_server — versions 2004, 2006
- Microsoft Office — versions 2003, xp
- Microsoft Office_web_components — versions 2000, 2003, xp
- Microsoft Visual_studio_.net — versions 2003
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)