VULNERABILITY INTELLIGENCE

CVE-2009-0202

CVSS score9.3 HIGH
EPSS probability23.58%
CISA KEVNot currently listed
Published2009-06-11
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified "layout information" that triggers a heap-based buffer overflow.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references