Live › vulnerability › CVE-2009-0563
Go to dashboardMicrosoft Office has a buffer overflow triggered by a crafted Word document with an invalid length field in a tag. An attacker who gets a user to open the file can run code on that user's machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Office | vendor | – | – |
| microsoft office | vendor | = 2000 | – |
| microsoft office | vendor | = 2003 | – |
| microsoft office | vendor | = 2004 | – |
| microsoft office | vendor | = 2007 | – |
| microsoft office | vendor | = 2008 | – |
| microsoft office | vendor | = xp | – |
| microsoft office compatibility pack | vendor | = 2007 | – |
| microsoft office word viewer | vendor | – | – |
| microsoft office word viewer | vendor | = 2003 | – |
| microsoft open xml file format converter | vendor | – | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a crafted tag containing an invalid length field, aka "Word Buffer Overflow Vulnerability."
This page as .md · .json · in your agent: get_signal("CVE-2009-0563")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.