CVE-2009-1515

no score yetEPSS 3.7%

christos zoulas file: no CVSS score yet. EPSS 3.7% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file. NOTE: some of these details are obtained from third party information.

EPSS: 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2009-05-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

christos_zoulas:file

References

ftp://ftp.astron.com/pub/file/file-5.01.tar.gz
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515603
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525820
http://mx.gw.com/pipermail/file/2009/000379.html
http://secunia.com/advisories/34881

Check your stack JSON