CVE-2009-1534

Name of the Vulnerable Software and Affected Versions: Microsoft Office XP SP3 Microsoft Office 2000 Web Components SP3 Microsoft Office XP Web Components SP3 Microsoft BizTalk Server 2002 Microsoft Visual Studio .NET 2003 SP1

Description: The issue is related to a buffer overflow in the Office Web Components ActiveX Control, which allows remote attackers to execute arbitrary code via crafted property values.

Recommendations: For Microsoft Office XP SP3, update to a version that includes the fix for this issue. For Microsoft Office 2000 Web Components SP3, update to a version that includes the fix for this issue. For Microsoft Office XP Web Components SP3, update to a version that includes the fix for this issue. For Microsoft BizTalk Server 2002, update to a version that includes the fix for this issue. For Microsoft Visual Studio .NET 2003 SP1, update to a version that includes the fix for this issue.