Office Powerpoint

Vendor:

First CVE: Apr 3, 2009 · Active for 17 years

15

Total CVEs

More Total CVEs than 92% of tracked products

15.0

Avg CVEs / Year

Higher CVE frequency than 98% of tracked products

9.3

Avg CVSS

Higher Avg CVSS than 85% of tracked products

6.7%

KEV Rate

Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Office Powerpoint over time

Volume of CVEsAvg CVSS Base Score

First CVE

Apr 3, 2009

17 years ago

Most Recent CVE

Jun 11, 2009

6,253 days ago

CVE Severity & Scoring

Office Powerpoint15 CVEs

100%

All CVEs352,427 CVEs

45%

40%

11%

High

Attack Vector

Local0 (0.0%)

Network1 (6.7%)

Unknown14 (93.3%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (6.7%)

High0 (0.0%)

Unknown14 (93.3%)

User Interaction

None0 (0.0%)

Unknown14 (93.3%)

Required1 (6.7%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None1 (6.7%)

Unknown14 (93.3%)

Top CVEs

Signals from CVEs in this product scope (15 CVEs).

15 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2009-0556HIGH Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint fi	Apr 3, 2009	8.8	91	YES	NO
CVE-2009-1130HIGH Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code	May 12, 2009	9.3	45	NO	NO
CVE-2009-1131HIGH Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with unspecifie	May 12, 2009	9.3	44	NO	NO
CVE-2009-1129HIGH Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute a	May 12, 2009	9.3	44	NO	NO
CVE-2009-0221HIGH Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "	May 12, 2009	9.3	44	NO	NO
CVE-2009-0226HIGH Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary cod	May 12, 2009	9.3	43	NO	NO
CVE-2009-0227HIGH Stack-based buffer overflow in the PowerPoint 4.2 conversion filter (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute	May 12, 2009	9.3	42	NO	NO
CVE-2009-1137HIGH Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native fi	May 12, 2009	9.3	41	NO	NO
CVE-2009-0225HIGH Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to imp	May 12, 2009	9.3	41	NO	NO
CVE-2009-0224HIGH Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 fo	May 12, 2009	9.3	41	NO	NO

View all 15 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (15 CVEs).

CISA KEV

1 CVE

6.7% of CVEs· 97th percentile

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (15 CVEs).

Media Mentions

Signals from CVEs in this product scope (15 CVEs).

Top CNAs Publishing CVEs For Office Powerpoint

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	KEV
2007	1	9.3	30.1%	0
2004	1	8.8	67.5%	1
2003	11	9.3	33.6%	0
2002	13	9.3	32.6%	0
2000	11	9.3	32.0%	0