CVE-2009-0556

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

• Published Apr 3, 2009
• CVSS 8.8 high
• 67.3% chance of exploitation in the next 30 days (EPSS)
• In CISA's Known Exploited Vulnerabilities catalog
• A fix is available

CVE-2009-0556 at the National Vulnerability Database