CVE-2009-0221

CVE-2009-0221 describes an integer overflow vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3. This flaw allows remote attackers to execute arbitrary code by crafting a PowerPoint file with a malicious record type that leads to a heap-based buffer overflow. The vulnerability carries a critical CVSS score of 9.3, indicating a network-based attack with medium complexity that can result in complete compromise of confidentiality, integrity, and availability. While the EPSS score suggests a high likelihood of exploitation, there is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.