PT-2009-3207 · Microsoft · Office For Mac+3

Carsten H. Eiram · Publicado 2009-06-10 · Atualizado 2018-10-12 · CVE-2009-0558

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2000 SP3 and earlier Microsoft Office for Mac versions 2004 and 2008 Open XML File Format Converter for Mac (affected versions not specified)

Description A remote code execution issue exists in Microsoft Office Excel, allowing attackers to execute arbitrary code via a crafted Excel file with a malformed record object. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Office 2000 SP3 and earlier, update to a version that includes the fix for this issue. For Microsoft Office for Mac versions 2004 and 2008, update to a version that includes the fix for this issue. For Open XML File Format Converter for Mac, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-0558

Produtos afetados

Office

Office Excel

Office For Mac

Open Xml File Format Converter For Mac

Referências · 12

• http://osvdb.org/54954 · Nota
• http://vupen.com/english/advisories/2009/1540 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 · Aviso do Fabricante
• http://securityfocus.com/archive/1/504188/100/0/threaded · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11525 · Nota
• http://securitytracker.com/id?1022351 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0558 · Nota de Segurança
• http://secunia.com/secunia_research/2009-1 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA09-160A.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0558 · Nota de Segurança
• http://securityfocus.com/bid/35242 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-021 · Nota