CVE Vulnerabilities

CVE-2009-0560

Published: Jun 10, 2009 | Modified: Oct 12, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka Field Sanitization Memory Corruption Vulnerability.

Affected Software

Name Vendor Start Version End Version
Office Microsoft 2004 (including) 2004 (including)
Office Microsoft 2008 (including) 2008 (including)
Office Microsoft xp-sp3 (including) xp-sp3 (including)
Office_compatibility_pack_for_word_excel_ppt_2007 Microsoft * *
Office_excel Microsoft 2000-sp3 (including) 2000-sp3 (including)
Office_excel Microsoft 2003-sp3 (including) 2003-sp3 (including)
Office_excel Microsoft 2007-sp1 (including) 2007-sp1 (including)
Office_excel Microsoft 2007-sp2 (including) 2007-sp2 (including)
Office_excel_viewer Microsoft * *
Office_excel_viewer Microsoft 2003-sp3 (including) 2003-sp3 (including)
Office_sharepoint_server Microsoft 2007-sp1 (including) 2007-sp1 (including)
Office_sharepoint_server Microsoft 2007-sp2 (including) 2007-sp2 (including)
Open_xml_file_format_converter Microsoft * *

References