CVE-2009-0202: Microsoft Office PowerPoint

High severity, CVSS 9.3. EPSS: 23.6% chance of exploitation in the next 30 days.

Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified "layout information" that triggers a heap-based buffer overflow.

Affected products

• Microsoft Office PowerPoint: version 2000 only; version 2002 only

Published 2009-06-11. Last modified 2026-06-16.