How to Buy
This script is Copyright (C) 2009-2016 Tenable Network Security, Inc.
Arbitrary code can be executed on the remote host through Microsoft
The remote host is running a version of Microsoft Works for Windows
document converters that is affected by a buffer overflow
vulnerability. If an attacker can trick a user on the affected host
into opening a specially crafted Works file, this issue could be
leveraged to run arbitrary code on the host subject to the user's
See also :
Microsoft has released a set of patches for Office 2000, 2003 and XP
as well as 2007 Microsoft Office System, Works 8.5 and Works 9.
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 7.7
Public Exploit Available : true
Family: Windows : Microsoft Bulletins
Nessus Plugin ID: 39346 ()
Bugtraq ID: 35184
CVE ID: CVE-2009-1533
Get Nessus Professional to scan unlimited IPs, run compliance checks & more
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.