# CVEs published 2009-11-11

15 CVEs were published on November 11, 2009: 1 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2009-3130](https://cve.now/CVE-2009-3130.md): Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allo (no CVSS)
- [CVE-2009-3131](https://cve.now/CVE-2009-3131.md): Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic (no CVSS)
- [CVE-2009-3132](https://cve.now/CVE-2009-3132.md): Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic (no CVSS)
- [CVE-2009-3133](https://cve.now/CVE-2009-3133.md): Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute (no CVSS)
- [CVE-2009-3134](https://cve.now/CVE-2009-3134.md): Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic (no CVSS)
- [CVE-2009-1127](https://cve.now/CVE-2009-1127.md): win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and (no CVSS)
- [CVE-2009-1928](https://cve.now/CVE-2009-1928.md): Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold (no CVSS)
- [CVE-2009-2512](https://cve.now/CVE-2009-2512.md): The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the head (CVSS 9.8)
- [CVE-2009-2513](https://cve.now/CVE-2009-2513.md): The Graphics Device Interface (GDI) in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, (no CVSS)
- [CVE-2009-2514](https://cve.now/CVE-2009-2514.md): win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during constr (no CVSS)
- [CVE-2009-2523](https://cve.now/CVE-2009-2523.md): The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message c (no CVSS)
- [CVE-2009-3127](https://cve.now/CVE-2009-3127.md): Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel Viewer (no CVSS)
- [CVE-2009-3128](https://cve.now/CVE-2009-3128.md): Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows (no CVSS)
- [CVE-2009-3129](https://cve.now/CVE-2009-3129.md): Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic (CVSS 7.8, KEV)
- [CVE-2009-3135](https://cve.now/CVE-2009-3135.md): Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-11-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.