PT-2009-3210 · Microsoft · Open Xml File Format Converter For Mac+11

Carsten H. Eiram + 2 · Published 2009-06-10 · Updated 2018-10-12 · CVE-2009-0561

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office 2000 SP3 Microsoft Office XP SP3 Microsoft Office 2003 SP3 Microsoft Office 2004 for Mac Microsoft Office 2008 for Mac 2007 Microsoft Office System SP1 2007 Microsoft Office System SP2 Open XML File Format Converter for Mac Microsoft Office Excel Viewer 2003 SP3 Microsoft Office Excel Viewer Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 Microsoft Office SharePoint Server 2007 SP1 Microsoft Office SharePoint Server 2007 SP2

Description The issue allows remote attackers to execute arbitrary code via an Excel file with a Shared String Table (SST) record containing a numeric field that specifies an invalid number of unique strings, triggering a heap-based buffer overflow. This could enable an attacker to take complete control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Office 2000 SP3, update to a newer version to mitigate the risk. For Microsoft Office XP SP3, update to a newer version to mitigate the risk. For Microsoft Office 2003 SP3, update to a newer version to mitigate the risk. For Microsoft Office 2004 for Mac, update to a newer version to mitigate the risk. For Microsoft Office 2008 for Mac, update to a newer version to mitigate the risk. For 2007 Microsoft Office System SP1, update to a newer version to mitigate the risk. For 2007 Microsoft Office System SP2, update to a newer version to mitigate the risk. For Open XML File Format Converter for Mac, update to a newer version to mitigate the risk. For Microsoft Office Excel Viewer 2003 SP3, update to a newer version to mitigate the risk. For Microsoft Office Excel Viewer, update to a newer version to mitigate the risk. For Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1, update to a newer version to mitigate the risk. For Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2, update to a newer version to mitigate the risk. For Microsoft Office SharePoint Server 2007 SP1, update to a newer version to mitigate the risk. For Microsoft Office SharePoint Server 2007 SP2, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting the use of Excel files from untrusted sources until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2009-0561

Affected Products

2007 Microsoft Office System

Office 2000

Office 2003

Office 2004 For Mac

Office 2008 For Mac

Office Compatibility Pack For Word

Office Excel Viewer

Office Excel Viewer 2003

Office Sharepoint Server 2007

Office Xp

Office Excel

Open Xml File Format Converter For Mac

References · 13

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0561 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 · Vendor Advisory
• http://secunia.com/secunia_research/2009-12 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1540 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0561 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5925 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=805 · Note
• http://securityfocus.com/bid/35245 · Note
• http://osvdb.org/54957 · Note
• http://securitytracker.com/id?1022351 · Note
• http://us-cert.gov/cas/techalerts/TA09-160A.html · Note
• http://securityfocus.com/archive/1/504190/100/0/threaded · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-021 · Note