Unscored severity · published Apr 15, 2009
CVE-2009-0100
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel Viewer and Excel Viewer 2003 SP3; and…
–
CVSS
28.8%
EPSS
No
On KEV
Description
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel Viewer and Excel Viewer 2003 SP3; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 do not properly parse the Excel spreadsheet file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that contains a malformed object with "an offset and a two-byte value" that trigger a memory calculation error, aka "Memory Corruption Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)28.8% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2004; 2008 · source: NVD
OC
Office Compatibility Pack For Word Excel Ppt 2007 · Microsoft
All versions, or not specified · source: NVD
OE
Office Excel · Microsoft
2000; 2002; 2003; 2007 · source: NVD
OE
Office Excel Viewer · Microsoft
2003 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0100
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0100
osvdb.org
http://osvdb.org/53665
www.fortiguardcenter.com
http://www.fortiguardcenter.com/advisory/FGA-2009-16.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/502696/100/0/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1022039
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA09-104A.html
www.vupen.com
http://www.vupen.com/english/advisories/2009/1023
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability