CVE-2009-2496 in Office
摘要
由 VulDB • 2026-06-21
Microsoft Office XP SP3、Office 2003 SP3、Office XP Web Components SP3、Office 2003 Web Components SP3、适用于 Microsoft Office System 2007 的 Office 2003 Web Components SP1、Internet Security and Acceleration (ISA) Server 2004 SP3 和 2006 SP1，以及 Office Small Business Accounting 2006 中的 Office Web Components ActiveX Control 存在基于堆（Heap-based）的缓冲区溢出漏洞。远程攻击者可通过向未知方法传递未指定的参数执行任意代码。该漏洞也被称为“Office Web Components Heap Corruption Vulnerability”。
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.