CVE-2009-3128

Description

Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka "Excel SxView Memory Corruption Vulnerability."

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6474

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067

http://www.us-cert.gov/cas/techalerts/TA09-314A.html

http://www.securitytracker.com/id?1023157

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3