CVE-2009-1129
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft PowerPoint是美国微软（Microsoft）公司的Office套件中的一个文档演示工具。 PowerPoint的PP7X32.DLL库所提供的PowerPoint 95格式文件导入器中存在栈溢出漏洞。在从PowerPoint文件读取声音数据时，读取了一个代表记录长度的值，之后将这个值用于控制将要读取到固定大小栈缓冲区的字节数。由于没有执行检查确保缓冲区可以容纳所指定的字节数，因此可能触发栈溢出。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2009-1129
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft PowerPoint PP7X32.DLL库栈溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft PowerPoint是美国微软（Microsoft）公司的Office套件中的一个文档演示工具。 PowerPoint的PP7X32.DLL库所提供的PowerPoint 95格式文件导入器中存在栈溢出漏洞。在从PowerPoint文件读取声音数据时，读取了一个代表记录长度的值，之后将这个值用于控制将要读取到固定大小栈缓冲区的字节数。由于没有执行检查确保缓冲区可以容纳所指定的字节数，因此可能触发栈溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2009-1129
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-1129
请登录查看更多情报信息。
Vendor Advisories for CVE-2009-1129 (8)
-
-
-
-
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 vendor-advisory x_refsource_MS
-
-
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176 vdb-entry signature x_refsource_OVAL
Other References for CVE-2009-1129 (1)
-
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791 third-party-advisory x_refsource_IDEFENSE
Same Patch Batch · n/a · 2009-05-12 · 27 CVEs total
| CVE-2008-6807 | Ibiblio Osprey 'ListRecords.php'多个远程文件包含漏洞 | |
| CVE-2009-1627 | SDP Downloader ASX文件处理堆溢出漏洞 | |
| CVE-2009-1626 | EZ-Blog 'public/specific.php' SQL注入漏洞 | |
| CVE-2009-1625 | Thickbox Gallery 'index.php' 本地文件包含漏洞 | |
| CVE-2009-1624 | Dew-Code Dew-NewPHPLinks 'index.php' 本地文件目录遍历漏洞 | |
| CVE-2009-1623 | Dew-Code Dew-NewPHPLinks 'index.php' 本地文件包含和跨站脚本攻击漏洞 | |
| CVE-2009-1622 | ECShop 'user.php' SQL注入漏洞 | |
| CVE-2009-1621 | OpenCart 'index.php' 本地文件目录遍历漏洞 | |
| CVE-2009-1620 | MataChat 'input.php' 多个跨站脚本攻击漏洞 | |
| CVE-2009-1619 | Teraway FileStream twFSadmin cookieCookie认证绕过漏洞 | |
| CVE-2009-1618 | Teraway LinkTracker TWLHadmin cookie Cookie认证绕过漏洞 | |
| CVE-2009-1617 | Teraway LinkTracker twLTadmin Cookie认证绕过漏洞 | |
| CVE-2008-6808 | Scripts For Sites EZ Link Directory 'links.php' SQL注入漏洞 | |
| CVE-2009-0220 | Microsoft PowerPoint PP4X32.DLL库多个栈溢出漏洞 | |
| CVE-2008-6806 | 7-Shop 'imageupload.php'任意文件上传漏洞 | |
| CVE-2009-1137 | Microsoft PowerPoint PP4X32.DLL库栈溢出漏洞 | |
| CVE-2009-1131 | Microsoft PowerPoint 数据越界栈溢出漏洞 | |
| CVE-2009-1130 | Microsoft PowerPoint Notes容器堆溢出漏洞 | |
| CVE-2009-1128 | Microsoft PowerPoint PP7X32.DLL 多个栈溢出漏洞 | |
| CVE-2009-0227 | Microsoft PowerPoint PP4X32.DLL库栈溢出漏洞 |
Showing top 20 of 27 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
V. Comments for CVE-2009-1129
No comments yet