CVE-2009-0560 - CVE House
Back to Database
Status published Critical CVE-2009-0560

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office...

Vulnerability Description

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Field Sanitization Memory Corruption Vulnerability."

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-0560

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

office, office compatibility pack for word excel ppt 2007, office excel, office excel viewer, office sharepoint server, open xml file format converter
Vulnerable Versions:
2004, 2008, xp, 2000, 2003, 2007

Timeline

Official Publish: June 10th, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.