CVE-2009-0223: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary c...

Security readout for executives and security teams

This is a legacy Microsoft PowerPoint remote code execution flaw. A malicious PowerPoint 4.0-format file with crafted sound data could corrupt memory and run attacker-controlled code when opened in affected PowerPoint versions. Exposure is most likely where old PowerPoint versions remain installed or old Office compatibility workflows allow PowerPoint 4.0 native files. Modern environments without these legacy versions are less likely exposed, based on the provided affected-product data. Prioritize remediation if any legacy Office installations remain. This is old, but remote code execution through document handling can still create business risk where obsolete software persists. Mitigation focus: Review and apply Microsoft MS09-017 guidance for affected PowerPoint versions.; Remove or replace PowerPoint 2000, 2002, and 2003 where still present.; Restrict handling of PowerPoint 4.0 native file formats if business use is unnecessary..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.