CVE-2009-1533
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office...
CVE-2009-1533 is a high vulnerability (CVSS 9.3) in Microsoft Office, published June 10, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 35.6%, the 98th percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 35.6%EPSS, 98th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
Exploit likelihood
Affected products
What each source reports
NVD Score used
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
- Record
CVE-2009-1533- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
- Record
CVE-2009-1533- Updated
- 2026-11-02
EUVDEUVD-2009-1529No score
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
- Record
EUVD-2009-1529- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h8q6-mwvg-c9mqNo score
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office...
Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
- Record
GHSA-h8q6-mwvg-c9mq- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2009/1543
secunia.com/advisories/35371
securityfocus.com/bid/35184
osvdb.org/54939
securitytracker.com/id?1022355
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-024
Show 7 moreShow less
us-cert.gov/cas/techalerts/TA09-160A.html
jvn.jp/en/jp/JVN70858401/index.html
blogs.technet.com/srd/archive/2009/06/09/ms09-024.aspx
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6292
nvd.nist.gov/vuln/detail/CVE-2009-1533
github.com/advisories/GHSA-h8q6-mwvg-c9mq