CVE-2009-3135

CVE-2009-3135 describes a stack-based buffer overflow vulnerability affecting multiple versions of Microsoft Office Word, Office Word Viewer, and Open XML File Format Converter for Mac. This flaw allows remote attackers to execute arbitrary code by crafting a malicious Word document with a malformed File Information Block (FIB) structure. With a CVSS score of 9.3, this vulnerability is critical, requiring no authentication and having high impact on confidentiality, integrity, and availability, though it does require user interaction (medium attack complexity). Despite its high severity and EPSS score, there is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage for this CVE.