Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-0557

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Object Record Corruption Vulnerability."

Published

2009-06-10T18:30:00.203

Last Modified

2025-10-22T01:15:33.617

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-94
Type: Secondary
CWE-94

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	microsoft	office	2000	Yes
Application	microsoft	office	2003	Yes
Application	microsoft	office	2004	Yes
Application	microsoft	office	2007	Yes
Application	microsoft	office	2007	Yes
Application	microsoft	office	2008	Yes
Application	microsoft	office	xp	Yes
Application	microsoft	office_compatibility_pack	2007	Yes
Application	microsoft	office_compatibility_pack	2007	Yes
Application	microsoft	office_excel_viewer	-	Yes
Application	microsoft	office_excel_viewer	2003	Yes
Application	microsoft	office_sharepoint_server	2007	Yes
Application	microsoft	office_sharepoint_server	2007	Yes
Application	microsoft	open_xml_file_format_converter	-	Yes

References

http://osvdb.org/54953 Broken Link ([email protected])
http://www.securityfocus.com/bid/35241 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id?1022351 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.us-cert.gov/cas/techalerts/TA09-160A.html Broken Link, Third Party Advisory, US Government Resource ([email protected])
http://www.vupen.com/english/advisories/2009/1540 Broken Link ([email protected])
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 Patch, Vendor Advisory ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5564 Broken Link ([email protected])
http://osvdb.org/54953 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/35241 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1022351 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA09-160A.html Broken Link, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/1540 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5564 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0557 (134c704f-9b21-4f2e-91b3-4a467353bcc0)