CVE-2009-0565 describes a critical buffer overflow vulnerability in multiple versions of Microsoft Word and related Office products, including Office for Mac and the Compatibility Pack. This flaw allows remote attackers to execute arbitrary code by enticing a user to open a specially crafted Word document containing a malformed record. With a CVSS score of 9.3, it represents a severe risk, as exploitation requires no authentication and can lead to complete compromise of the affected system. While not listed on the KEV catalog, exploit code is publicly available, including Metasploit modules, though community discussion and media coverage remain low.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2004CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:* | ||
2008CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:* | ||
2000CPE matchmatch criteria | cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.