Office Excel Viewer vulnerabilities | LiveThreat CVE Feed

Product

Office Excel Viewer

by Microsoft · last CVE Jun 8, 2010

On CISA KEVExploited in the wild

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities29 In the news1 Timeline

Severity mix

Critical 0High 4Medium 0Low 0

Severity

All severities29 Critical0 High4 Medium0 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Office Excel Viewer to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2009-0238 In wildKEV	8.8	43%	Feb 25	Microsoft Office Remote Code Execution Affected: 2003
CVE-2009-0557 In wildKEV	7.8	53%	Jun 10	Microsoft Office Object Record Corruption Vulnerability Affected: 2003
CVE-2009-2502	8.1	22%	Oct 14	Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002… Affected: All versions, or not specified
CVE-2010-0258	7.8	61%	Mar 10	Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office… Affected: All versions, or not specified
CVE-2010-0823	–	20%	Jun 8	Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office… Affected: All versions, or not specified
CVE-2010-0821	–	24%	Jun 8	Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office… Affected: All versions, or not specified
CVE-2010-0264	–	21%	Mar 10	Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote… Affected: All versions, or not specified
CVE-2010-0263	–	26%	Mar 10	Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel,… Affected: All versions, or not specified
CVE-2010-0262	–	21%	Mar 10	Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted… Affected: All versions, or not specified
CVE-2010-0261	–	23%	Mar 10	Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote… Affected: All versions, or not specified
CVE-2010-0260	–	23%	Mar 10	Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File… Affected: All versions, or not specified
CVE-2010-0257	–	19%	Mar 10	Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft… Affected: All versions, or not specified
CVE-2009-3126	–	23%	Oct 14	Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project… Affected: All versions, or not specified
CVE-2009-2528	–	20%	Oct 14	GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted… Affected: All versions, or not specified
CVE-2009-2504	–	21%	Oct 14	Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista… Affected: All versions, or not specified
CVE-2009-2503	–	22%	Oct 14	GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office… Affected: All versions, or not specified
CVE-2009-2501	–	27%	Oct 14	Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office… Affected: All versions, or not specified
CVE-2009-2500	–	24%	Oct 14	Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project… Affected: All versions, or not specified
CVE-2009-1134	–	36%	Jun 10	Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and… Affected: 2003
CVE-2009-0561	–	37%	Jun 10	Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open… Affected: 2003
CVE-2009-0560	–	28%	Jun 10	Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format… Affected: 2003
CVE-2009-0559	–	29%	Jun 10	Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed… Affected: 2003
CVE-2009-0558	–	31%	Jun 10	Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary… Affected: 2003
CVE-2009-0549	–	28%	Jun 10	Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Microsoft Office Excel Viewer… Affected: 2003
CVE-2009-0100	–	29%	Apr 15	Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel Viewer and Excel Viewer 2003 SP3; and… Affected: 2003
CVE-2008-4265	–	25%	Dec 10	Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory… Affected: 2003; 2003
CVE-2008-4264	–	26%	Dec 10	Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint… Affected: 2003; 2003
CVE-2008-3006	–	36%	Aug 12	Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold… Affected: 2003; 2003; 2003
CVE-2008-3004	–	32%	Aug 12	Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly validate index values for AxesSet… Affected: 2003