CVE-2009-0556

8.8 HIGH CISA KEV - Actively Exploited
Published: April 03, 2009 Modified: January 08, 2026
View on NVD

Description

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx
Source: secure@microsoft.com
Vendor Advisory
http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx
Source: secure@microsoft.com
Vendor Advisory
http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx
Source: secure@microsoft.com
Vendor Advisory
http://osvdb.org/53182
Source: secure@microsoft.com
http://secunia.com/advisories/34572
Source: secure@microsoft.com
Vendor Advisory
http://www.kb.cert.org/vuls/id/627331
Source: secure@microsoft.com
US Government Resource
http://www.microsoft.com/technet/security/advisory/969136.mspx
Source: secure@microsoft.com
Patch Vendor Advisory
http://www.securityfocus.com/archive/1/503453/100/0/threaded
Source: secure@microsoft.com
http://www.securityfocus.com/bid/34351
Source: secure@microsoft.com
http://www.securitytracker.com/id?1021967
Source: secure@microsoft.com
http://www.us-cert.gov/cas/techalerts/TA09-132A.html
Source: secure@microsoft.com
US Government Resource
http://www.vupen.com/english/advisories/2009/0915
Source: secure@microsoft.com
Vendor Advisory
http://www.vupen.com/english/advisories/2009/1290
Source: secure@microsoft.com
http://www.zerodayinitiative.com/advisories/ZDI-09-019
Source: secure@microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017
Source: secure@microsoft.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/49632
Source: secure@microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6204
Source: secure@microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6279
Source: secure@microsoft.com
http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://osvdb.org/53182
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/34572
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.kb.cert.org/vuls/id/627331
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.microsoft.com/technet/security/advisory/969136.mspx
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://www.securityfocus.com/archive/1/503453/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/34351
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1021967
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.us-cert.gov/cas/techalerts/TA09-132A.html
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.vupen.com/english/advisories/2009/0915
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2009/1290
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.zerodayinitiative.com/advisories/ZDI-09-019
Source: af854a3a-2127-422b-91ae-364da2661108
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/49632
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6204
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6279
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0556
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

37 reference(s) from NVD

Quick Stats

CVSS v3 Score
8.8 / 10.0
EPSS (Exploit Probability)
76.8%
99th percentile
Exploitation Status
Actively Exploited
Remediation due: 2026-01-28

Weaknesses (CWE)

CWE-94 CWE-94

Affected Vendors

microsoft

Related CVEs

CVE-2026-0824 3.5
CVE-2026-0822 6.3
CVE-2025-13393 4.3
CVE-2025-12379 6.4
CVE-2026-0821 7.3