CVE-2009-0202

Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified "layout information" that triggers a heap-based buffer overflow.

Published: Jun 11, 2009
Updated: Apr 13, 2023
CVE: CVE-2009-0202
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

CWE-94

Affected Software
References

Software	From	Fixed in
microsoft / office_powerpoint	2002	2002.x
microsoft / office_powerpoint	2000	2000.x

http://secunia.com/advisories/35184
http://secunia.com/secunia_research/2009-29/
http://securitytracker.com/id?1022369
http://www.osvdb.org/54961
http://www.securityfocus.com/archive/1/504215/100/0/threaded
http://www.securityfocus.com/bid/35275
https://exchange.xforce.ibmcloud.com/vulnerabilities/51034

Vulnerability Database

289,599

CVE-2009-0202