CVE-2009-0556 — Microsoft Office PowerPoint Code Injection Vulnerability

CISA KEVExploited: confirmedMicrosoft

Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.

Vulnerability details

Affected productsOffice
KEV remediation due2026-01-28