CVE-2009-0556: Microsoft Office PowerPoint Code Injection Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2026-01-07. EPSS: 67.3% chance of exploitation in the next 30 days.

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

Affected products

• Microsoft Office PowerPoint: version 2004 only
• Microsoft PowerPoint: version 2000 only; version 2002 only; version 2003 only

Published 2009-04-03. Last modified 2026-06-16.