PT-2009-3209 · Microsoft · Open Xml File Format Converter For Mac+4

Published 2009-06-10 · Updated 2018-10-12 · CVE-2009-0560

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel versions in Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2004, Office 2008 for Mac, 2007 Microsoft Office System SP1, and SP2 Open XML File Format Converter for Mac Microsoft Office Excel Viewer 2003 SP3 Microsoft Office Excel Viewer Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2

Description A remote code execution issue exists in Microsoft Office Excel, allowing attackers to execute arbitrary code via a crafted Excel file with a malformed record object. If successfully exploited, an attacker could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Office Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2004, Office 2008 for Mac, 2007 Microsoft Office System SP1, and SP2, update to a version that includes the fix for this issue. For Open XML File Format Converter for Mac, Microsoft Office Excel Viewer 2003 SP3, Microsoft Office Excel Viewer, and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, update to a version that includes the fix for this issue. As a temporary workaround, consider avoiding the use of malformed record objects in Excel files until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-0560

Affected Products

Office Compatibility Pack For Word

Office Excel

Office Excel Viewer

Office Excel Viewer 2003

Open Xml File Format Converter For Mac

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2009-0560 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0560 · Security Note
• http://vupen.com/english/advisories/2009/1540 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-021 · Note
• http://osvdb.org/54956 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6178 · Note
• http://securitytracker.com/id?1022351 · Note
• http://us-cert.gov/cas/techalerts/TA09-160A.html · Note
• http://securityfocus.com/bid/35244 · Note