CVE-2009-3129

Description

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka Excel Featheader Record Memory Corruption Vulnerability.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

91.083

Associated Vulnerability

Vulnerability	OS Platform
Security Update for Microsoft Excel 2002 (KB973471)	Windows
Security Update for Microsoft Office Excel 2003 (KB973475)	Windows
Security Update for Microsoft Office Excel 2007 (KB973593) x86 based systems	Windows
Security Update for Microsoft Office Excel 2007 (KB973593) x86 based systems for SP2	Windows
Security Update for Microsoft Office Excel Viewer 2003 (KB973484)	Windows
Security Update for Microsoft Office Excel Viewer (KB973707)	Windows
Security Update for the 2007 Microsoft Office System (KB973704) x86 based systems	Windows
Security Update for the 2007 Microsoft Office System (KB973704) x86 based systems for SP2	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-7892	Security Update for Microsoft Office Excel 2007 (KB973593)
PATCH-7893	Security Update for Microsoft Office Excel 2007 (KB973593)
PATCH-7895	Security Update for Microsoft Office Excel Viewer (KB973707)
PATCH-7896	Security Update for the 2007 Microsoft Office System (KB973704)
PATCH-7897	Security Update for the 2007 Microsoft Office System (KB973704)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234