# CVEs published 2009-11-11

15 CVEs were published on November 11, 2009: 1 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2009-3130](https://cve.now/CVE-2009-3130.md): Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac… (no CVSS)
- [CVE-2009-3131](https://cve.now/CVE-2009-3131.md): Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac… (no CVSS)
- [CVE-2009-3132](https://cve.now/CVE-2009-3132.md): Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac… (no CVSS)
- [CVE-2009-3133](https://cve.now/CVE-2009-3133.md): Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to… (no CVSS)
- [CVE-2009-3134](https://cve.now/CVE-2009-3134.md): Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac… (no CVSS)
- [CVE-2009-1127](https://cve.now/CVE-2009-1127.md): win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold… (no CVSS)
- [CVE-2009-1928](https://cve.now/CVE-2009-1928.md): Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008… (no CVSS)
- [CVE-2009-2512](https://cve.now/CVE-2009-2512.md): The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the… (CVSS 9.8)
- [CVE-2009-2513](https://cve.now/CVE-2009-2513.md): The Graphics Device Interface (GDI) in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista… (no CVSS)
- [CVE-2009-2514](https://cve.now/CVE-2009-2514.md): win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during… (no CVSS)
- [CVE-2009-2523](https://cve.now/CVE-2009-2523.md): The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message… (no CVSS)
- [CVE-2009-3127](https://cve.now/CVE-2009-3127.md): Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel… (no CVSS)
- [CVE-2009-3128](https://cve.now/CVE-2009-3128.md): Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which… (no CVSS)
- [CVE-2009-3129](https://cve.now/CVE-2009-3129.md): Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic (CVSS 7.8, KEV)
- [CVE-2009-3135](https://cve.now/CVE-2009-3135.md): Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-11-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.