Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2009-0221

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft PowerPoint是美国微软（Microsoft）公司的Office套件中的一个文档演示工具。 PowerPoint在解析两个相关PowerPoint记录类型时存在整数溢出漏洞。第一个记录类用于指定不同幻灯片的协作信息，该记录中的一个字段包含有用于指定文件中特定记录类型数量的32位整数，该整数之后在乘法运算中使用计算用于存储记录的堆缓冲区大小。这个计算可能溢出，导致分配了不充分的堆缓冲区。通过对记录计数提供很大的值，并注入虚构的记录，就可以触发堆溢出。

AI Predicted 7.8 Difficulty: Easy EPSS 37.86% · P99 Updated Feb 21, 2026

Possible ATT&CK Techniques 3 AI

T1059 · Command and Scripting Interpreter T1566.002 · Spearphishing Link T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2009-0221

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration information for different slides" that contains a field that specifies a large number of records, which triggers an under-allocated buffer and a heap-based buffer overflow, aka "Integer Overflow Vulnerability."

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Microsoft PowerPoint无效记录类型整数溢出漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2009-0221

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2009-0221

请登录查看更多情报信息。

Vendor Advisories for CVE-2009-0221 (8)

http://osvdb.org/54394 vdb-entry x_refsource_OSVDB
http://www.securityfocus.com/bid/34835 vdb-entry x_refsource_BID
http://secunia.com/advisories/32428 third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id?1022205 vdb-entry x_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 vendor-advisory x_refsource_MS
http://www.us-cert.gov/cas/techalerts/TA09-132A.html third-party-advisory x_refsource_CERT
http://www.vupen.com/english/advisories/2009/1290 vdb-entry x_refsource_VUPEN
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6127 vdb-entry signature x_refsource_OVAL

Other References for CVE-2009-0221 (1)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=796 third-party-advisory x_refsource_IDEFENSE

https://www.cve.org/CVERecord?id=CVE-2009-0221

Same Patch Batch · n/a · 2009-05-12 · 27 CVEs total

CVE-2008-6807		Ibiblio Osprey 'ListRecords.php'多个远程文件包含漏洞
CVE-2009-1627		SDP Downloader ASX文件处理堆溢出漏洞
CVE-2009-1626		EZ-Blog 'public/specific.php' SQL注入漏洞
CVE-2009-1625		Thickbox Gallery 'index.php' 本地文件包含漏洞
CVE-2009-1624		Dew-Code Dew-NewPHPLinks 'index.php' 本地文件目录遍历漏洞
CVE-2009-1623		Dew-Code Dew-NewPHPLinks 'index.php' 本地文件包含和跨站脚本攻击漏洞
CVE-2009-1622		ECShop 'user.php' SQL注入漏洞
CVE-2009-1621		OpenCart 'index.php' 本地文件目录遍历漏洞
CVE-2009-1620		MataChat 'input.php' 多个跨站脚本攻击漏洞
CVE-2009-1619		Teraway FileStream twFSadmin cookieCookie认证绕过漏洞
CVE-2009-1618		Teraway LinkTracker TWLHadmin cookie Cookie认证绕过漏洞
CVE-2009-1617		Teraway LinkTracker twLTadmin Cookie认证绕过漏洞
CVE-2008-6808		Scripts For Sites EZ Link Directory 'links.php' SQL注入漏洞
CVE-2009-0220		Microsoft PowerPoint PP4X32.DLL库多个栈溢出漏洞
CVE-2008-6806		7-Shop 'imageupload.php'任意文件上传漏洞
CVE-2009-1137		Microsoft PowerPoint PP4X32.DLL库栈溢出漏洞
CVE-2009-1131		Microsoft PowerPoint 数据越界栈溢出漏洞
CVE-2009-1130		Microsoft PowerPoint Notes容器堆溢出漏洞
CVE-2009-1129		Microsoft PowerPoint PP7X32.DLL库栈溢出漏洞
CVE-2009-1128		Microsoft PowerPoint PP7X32.DLL 多个栈溢出漏洞

Showing top 20 of 27 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2009-0221

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2009-0221

Quick assessment

Possible ATT&CK Techniques 3 AI

I. Basic Information for CVE-2009-0221

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Shenlong Deep Dive — AI Deep Analysis

Affected Products

II. Public POCs for CVE-2009-0221

III. Intelligence Information for CVE-2009-0221

Vendor Advisories for CVE-2009-0221 (8)

Other References for CVE-2009-0221 (1)

Same Patch Batch · n/a · 2009-05-12 · 27 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2009-0221

Leave a comment