CVE-2009-0563
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.
CISA Known Exploited Vulnerability
Vendor / Product
Microsoft — Office
Date Added
2022-06-08
Remediation Due
2022-06-22
https://nvd.nist.gov/vuln/detail/CVE-2009-0563
Weakness Classification (1)
Affected Software (12)
| Vendor | Product | Version |
|---|---|---|
| microsoft | office | 2000 |
| microsoft | office | 2003 |
| microsoft | office | 2004 |
| microsoft | office | 2007 |
| microsoft | office | 2007 |
| microsoft | office | 2008 |
| microsoft | office | xp |
| microsoft | office_compatibility_pack | 2007 |
| microsoft | office_compatibility_pack | 2007 |
| microsoft | office_word_viewer | - |
| microsoft | office_word_viewer | 2003 |
| microsoft | open_xml_file_format_converter | - |
References & Advisories (10)
US Government Resource
Third Party Advisory
VDB Entry
Patch
Vendor Advisory
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
US Government Resource
Broken Link
Broken Link
Broken Link