PT-2009-5454 · Microsoft · Office Excel Viewer+2
Bing Liu
·
Published
2009-11-11
·
Updated
2018-10-12
·
CVE-2009-3127
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Microsoft Office Excel 2002 SP3 and 2003 SP3
Office 2004 and 2008 for Mac
Open XML File Format Converter for Mac
Office Excel Viewer 2003 SP3
Description:
A remote code execution issue exists in the way Microsoft Office Excel handles specially crafted Excel files, allowing attackers to execute arbitrary code via a crafted spreadsheet. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations:
For Microsoft Office Excel 2002 SP3, update to a version that properly parses the Excel file format to prevent arbitrary code execution.
For Microsoft Office Excel 2003 SP3, update to a version that properly handles specially crafted Excel files.
For Office 2004 and 2008 for Mac, update to a version that correctly parses the Excel file format.
For Open XML File Format Converter for Mac, update to a version that properly handles Excel files.
For Office Excel Viewer 2003 SP3, update to a version that correctly handles specially crafted Excel files.
Fix
RCE
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Office Excel
Office Excel Viewer
Open Xml File Format Converter For Mac