Published: 12/08/2009 Updated: 12/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 does not properly allocate memory, which allows remote malicious users to execute arbitrary code via unspecified vectors that trigger "system state" corruption, aka "Office Web Components Memory Allocation Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft office 2003
microsoft office xp
microsoft office web components xp
microsoft isa server 2004
microsoft isa server 2006
microsoft office web components 2003
microsoft office -
microsoft office web components 2000

IT Threat Evolution: Q1 2013

Securelist • Denis Maslennikov • 16 May 2013

The first quarter of 2013 turned out to be a busy time in IT security. This report will address the most significant events. At the very beginning of the year, Kaspersky Lab published a significant report with the results of a study on the global cyberespionage operation known as Red October. These attacks targeted various government agencies, diplomatic organizations and companies around the world. Analyzing the files and reconstructing the structure of the attack took several months. However, ...

CVE-2009-0562

Vulnerability Summary

Recent Articles

References

Vulmon Search

About

Products

Connect