Skip to content
COOEY

EXPOSURES › CVE-2009-0563

CVE-2009-0563

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-06-08 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2009-0563 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatchedrce

A 2009 Microsoft Office buffer overflow flaw allowed remote attackers to execute code via crafted Word documents.

This unpatched vulnerability was actively exploited in the wild, enabling remote code execution through malicious Office files. DIB organizations must ensure all Office applications are patched and restricted, as this represents a high-embarrassment failure due to its age and active exploitation.

Shame score — A known, unpatched vulnerability from 2009 that remained actively exploited in the wild, demonstrating severe negligence in patch management and vulnerability lifecycle handling.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized