CVE-2009-0565

HighPublished

Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter...

Published: Jun 10, 2009
Updated: Aug 7, 2024
Assigning CNA: microsoft
Evidence observed: Aug 20, 2010

Primary CVSS

9.3/ 10High

nvd · CVSS 2.0

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS probability estimate

40.5%

Moderate · next 30 days

Percentile: 98.6%
Model date: Oct 13, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a malformed record that triggers memory corruption, aka "Word Buffer Overflow Vulnerability."

Sources

Microsoft Word - Record Parsing Buffer Overflow (MS09-027)Exploit
anonymous · windows · Aug 20, 2010
Microsoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit)Exploit
Andrew King · windows · Apr 16, 2011

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.