CVE-2009-1131: Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to exe...

Security readout for executives and security teams

This is an old Microsoft PowerPoint file-parsing flaw. A malicious PowerPoint document could corrupt memory and potentially run code on a user’s machine. The bundle specifically identifies Microsoft Office PowerPoint 2000 SP3. No active exploitation is evidenced in the provided sources or KEV signal. Exposure is most likely on legacy endpoints still running Microsoft Office PowerPoint 2000 SP3 or able to open affected PowerPoint files. Modern environments should confirm whether unsupported Office versions remain through asset inventory and software metering. Prioritize remediation if any legacy PowerPoint 2000 SP3 systems remain. The business risk is document-triggered code execution on outdated user workstations, especially where staff open external files. If no affected legacy Office installations exist, residual urgency is low. Mitigation focus: Review and apply Microsoft MS09-017 guidance for affected Office installations.; Retire or isolate systems still running PowerPoint 2000 SP3.; Block or quarantine unexpected PowerPoint files from untrusted sources where feasible..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.