CVE-2009-0559

Опубликовано: 10 июн. 2009

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "String Copy Stack-Based Overrun Vulnerability."

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*

cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*

cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*

cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*

cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*

cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*

cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*

EPSS

Процентиль: 98%

0.53334

Средний

9.3 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-vwm5-4pv2-47qx

github

почти 4 года назад