Vulnerability identifier: #VU1421

Vulnerability risk: High

CVSSv3.1: 8.3 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2009-0562

CWE-ID: CWE-119

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Microsoft Office
Client/Desktop applications / Office applications
Microsoft Visual Studio .NET
Universal components / Libraries / Software for developers
Microsoft BizTalk Server
Server applications / Conferencing, Collaboration and VoIP solutions

Vendor: Microsoft

Description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to buffer overflow in Office Web Components ActiveX Control. A remote attacker can create a specially crafted Web page, trick the victim into viewing it, trigger memory corruption and execute arbitrary code on the target system with privileges of the current user.

Successful exploitation of the vulnerability results in arbitrary code execution on the vulnerable system.

Mitigation
Install update from vendor's website:

Microsoft Office XP Service Pack 3:
https://www.microsoft.com/downloads/details.aspx?familyid=60e2e4e7-aa75-441d-b6fc-7e850bf8e580
http://go.microsoft.com/fwlink/?LinkId=112114
Microsoft Office 2000 Web Components Service Pack 3:
https://www.microsoft.com/downloads/details.aspx?familyid=60e2e4e7-aa75-441d-b6fc-7e850bf8e580
http://go.microsoft.com/fwlink/?LinkId=112114
Microsoft Office XP Web Components Service Pack 3:
https://www.microsoft.com/downloads/details.aspx?familyid=60e2e4e7-aa75-441d-b6fc-7e850bf8e580
Microsoft BizTalk Server 2002:
https://www.microsoft.com/downloads/details.aspx?familyid=495839b6-0322-4755-997d-4a7762c53333
http://go.microsoft.com/fwlink/?LinkId=112114
Microsoft Visual Studio .NET 2003 Service Pack 1:
https://www.microsoft.com/downloads/details.aspx?familyid=ba2915a0-f5f4-4e18-b0c0-534d2a948585
http://go.microsoft.com/fwlink/?LinkId=112114

Vulnerable software versions

Microsoft Office: 2000

Microsoft Visual Studio .NET: 2003

Microsoft BizTalk Server: 2002

---

External links
http://technet.microsoft.com/en-us/library/security/ms09-043.aspx

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.