Vulnerability in Microsoft Excel_viewer
CVE-2009-2500
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003…
EPSS: 0.236 (97.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Excel_viewer — versions 2003
- Microsoft Expression_web — versions 2
- Microsoft Forefront_client_security — versions 1.0
- Microsoft Internet_explorer — versions 6
- Microsoft .Net_framework — versions 1.1, 2.0
- Microsoft Office — versions 2003, 2007, xp
- Microsoft Office_compatibility_pack — versions 2007
- Microsoft Office_excel_viewer
- Microsoft Office_groove — versions 2007
- Microsoft Office_powerpoint_viewer — versions 2007
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
Frequently asked questions
- What is CVE-2009-2500?
- CVE-2009-2500 is a vulnerability in Microsoft Excel_viewer, classified under CWE-189. Published 2009-10-14.
- Is CVE-2009-2500 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.