CVE-2009-0558

Опубликовано: 10 июн. 2009

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Array Indexing Memory Corruption Vulnerability."

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*

cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*

cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*

cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*

cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*

cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*

cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*

EPSS

Процентиль: 98%

0.53752

Средний

9.3 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-3pjh-hjmx-5pvh

github

почти 4 года назад