VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 12, 2009· Updated Apr 23, 2026

CVE-2009-1534

CVE-2009-1534

Description

Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability."

Affected products

11
  • Microsoft/Isa Server4 versions
    cpe:2.3:a:microsoft:isa_server:2004:sp3:enterprise:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:isa_server:2004:sp3:enterprise:*:*:*:*:*
    • cpe:2.3:a:microsoft:isa_server:2004:sp3:standard:*:*:*:*:*
    • cpe:2.3:a:microsoft:isa_server:2006:sp1:enterprise:*:*:*:*:*
    • cpe:2.3:a:microsoft:isa_server:2006:sp1:standard:*:*:*:*:*
  • Microsoft/Office3 versions
    cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:-:*:small_business_accounting_2006:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
  • Microsoft/Office Web Components4 versions
    cpe:2.3:a:microsoft:office_web_components:2000:sp3:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:office_web_components:2000:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_web_components:2003:sp1:2007_microsoft_office:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_web_components:xp:sp3:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.