Vulnerability in Microsoft Excel_viewer
CVE-2009-2504
Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP SP3, Office 2003 S…
EPSS: 0.210 (97.3th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Excel_viewer — versions 2003
- Microsoft Expression_web — versions 2
- Microsoft Forefront_client_security — versions 1.0
- Microsoft Internet_explorer — versions 6
- Microsoft .Net_framework — versions 1.1, 2.0
- Microsoft Office — versions 2003, 2007, xp
- Microsoft Office_compatibility_pack — versions 2007
- Microsoft Office_excel_viewer
- Microsoft Office_groove — versions 2007
- Microsoft Office_powerpoint_viewer — versions 2007
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
Frequently asked questions
- What is CVE-2009-2504?
- CVE-2009-2504 is a vulnerability in Microsoft Excel_viewer, classified under CWE-189. Published 2009-10-14.
- Is CVE-2009-2504 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.