PT-2009-5456 · Microsoft · Office 2008 For Mac+3

Nicolas Joly · Published 2009-11-11 · Updated 2018-10-12 · CVE-2009-3130

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel 2002 SP3 Office 2004 for Mac Office 2008 for Mac Open XML File Format Converter for Mac

Description: A heap-based buffer overflow issue exists in the way Microsoft Office Excel handles specially crafted Excel files with malformed Binary File Format (BIFF) records. This allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed BIFF record that triggers memory corruption. An attacker who successfully exploits this issue could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations: For Microsoft Office Excel 2002 SP3, update to a version that includes the fix for this issue. For Office 2004 for Mac, update to a version that includes the fix for this issue. For Office 2008 for Mac, update to a version that includes the fix for this issue. For Open XML File Format Converter for Mac, update to a version that includes the fix for this issue. As a temporary workaround, consider avoiding the use of BIFF records in Excel files until a patch is available.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-3130

Affected Products

Office Excel

Office 2004 For Mac

Office 2008 For Mac

Open Xml File Format Converter For Mac

References · 8

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3130 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3130 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6137 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3130 · Note
• http://securitytracker.com/id?1023157 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/ms09-067 · Note
• http://us-cert.gov/cas/techalerts/TA09-314A.html · Note