Lucene search

[email protected]CVE-2009-0558

HistoryJun 10, 2009 - 6:30 p.m.

CVE-2009-0558

2009-06-1018:30:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2009-0558

array index error

excel

microsoft office

office 2000

office 2004

office 2008

mac

open xml

memory corruption

vulnerability

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.943 High

EPSS

Percentile

99.2%

JSON

Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka “Array Indexing Memory Corruption Vulnerability.”

Affected configurations

NVD

Node

microsoftofficeMatch2004mac

microsoftofficeMatch2008mac

microsoftofficeMatchxpsp3

microsoftoffice_compatibility_pack_for_word_excel_ppt_2007sp1

microsoftoffice_compatibility_pack_for_word_excel_ppt_2007sp2

microsoftoffice_excelMatch2000sp3

microsoftoffice_excelMatch2003sp3

microsoftoffice_excelMatch2007sp1

microsoftoffice_excelMatch2007sp2

microsoftoffice_excel_viewer

microsoftoffice_excel_viewerMatch2003sp3

microsoftoffice_sharepoint_serverMatch2007sp1x32

microsoftoffice_sharepoint_serverMatch2007sp1x64

microsoftoffice_sharepoint_serverMatch2007sp2x32

microsoftoffice_sharepoint_serverMatch2007sp2x64

microsoftopen_xml_file_format_convertermac

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2004
microsoft:officemicrosoft officeeq2008
microsoft:officemicrosoft officeeqxp
microsoft:office_compatibility_pack_for_word_excel_ppt_2007microsoft office compatibility pack for word excel ppt 2007eq*
microsoft:office_excelmicrosoft office exceleq2000
microsoft:office_excelmicrosoft office exceleq2003
microsoft:office_excelmicrosoft office exceleq2007
microsoft:office_excel_viewermicrosoft office excel viewereq*
microsoft:office_excel_viewermicrosoft office excel viewereq2003
microsoft:office_sharepoint_servermicrosoft office sharepoint servereq2007

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	2004
microsoft:office	microsoft office	eq	2008
microsoft:office	microsoft office	eq	xp
microsoft:office_compatibility_pack_for_word_excel_ppt_2007	microsoft office compatibility pack for word excel ppt 2007	eq	*
microsoft:office_excel	microsoft office excel	eq	2000
microsoft:office_excel	microsoft office excel	eq	2003
microsoft:office_excel	microsoft office excel	eq	2007
microsoft:office_excel_viewer	microsoft office excel viewer	eq	*
microsoft:office_excel_viewer	microsoft office excel viewer	eq	2003
microsoft:office_sharepoint_server	microsoft office sharepoint server	eq	2007