CVEvulnerability

CVE-2009-0558

9.3 HIGH Published 2009-06-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-06-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Array Indexing Memory Corruption Vulnerability."

Affected configurations

• microsoft office 2004 • microsoft office 2008 • microsoft office xp • microsoft office compatibility pack for word excel ppt 2007 • microsoft office excel 2000 • microsoft office excel 2003 • microsoft office excel 2007 • microsoft office excel viewer • microsoft office excel viewer 2003 • microsoft office sharepoint server 2007 • microsoft open xml file format converter

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

Referenced by CWE · observed example (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-788 Access of Memory Location After End of Buffer weakness

References