CVE-2009-1533: Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, O...

Security readout for executives and security teams

This flaw lets a malicious Works document potentially take control of a vulnerable Windows workstation when opened in affected Microsoft Office or Works software. The business risk is highest where legacy Office or Works installations still process .wps files from email, web downloads, or shared drives. Exposure is most likely on legacy endpoints running Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, or Works 8.5/9 with Works document converter support. Treat as high priority only if legacy Microsoft Office or Works software remains in use. The vulnerability enables code execution through document handling, but the provided sources do not show current active exploitation. Mitigation focus: Review Microsoft MS09-024 guidance for applicable security updates and compensating actions.; Patch or replace affected Office and Works installations where still present.; Restrict untrusted .wps files from email, web downloads, and shared locations..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.