Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Field Sanitization Memory Corruption Vulnerability."

The remote Mac OS X host is running a version of Microsoft Office that is affected by several vulnerabilities.

If an attacker can trick a user on the affected host into opening a specially crafted Excel, PowerPoint, or Word file, these issues could be leveraged to execute arbitrary code subject to the user's privileges.

The remote host contains a version of Microsoft Excel / Excel Viewer / 2007 Microsoft Office system or the Microsoft Office Compatibility Pack that is affected by several buffer overflow and memory corruption vulnerabilities.  If an attacker can trick a user on the affected host into opening a specially crafted Excel file, any of these issues could be leveraged to run arbitrary code on the host subject to the user's privileges.

ID	Name	Product	Family	Severity
50062	MS09-017 / MS09-021 / MS09-027: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (967340 / 969462 / 969514) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
39343	MS09-021: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2009-0560

high

Tenable Plugins

high

high