← Back

CVE-2009-1134

nvd nist
Published: Jun 10, 2009Modified: Apr 23, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir (0x806) record object, aka "Record Pointer Corruption Vulnerability."

Affected (16)

Microsoft
6 products
Office
Office Compatibility Pack For Word Excel Ppt 2007
Office Excel
Office Excel Viewer
Office Sharepoint Server
Open Xml File Format Converter
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Office
Version 2004
Office
Version 2008
Office
Version xp sp3
Microsoft
Office Compatibility Pack For Word Excel Ppt 2007
All versions
Office Compatibility Pack For Word Excel Ppt 2007
All versions
Microsoft
Office Excel
Version 2000 sp3
Office Excel
Version 2003 sp3
Office Excel
Version 2007 sp1
Office Excel
Version 2007 sp2
Microsoft
Office Excel Viewer
All versions
Office Excel Viewer
Version 2003 sp3
Microsoft
Office Sharepoint Server
Version 2007 sp1
Office Sharepoint Server
Version 2007 sp1
Office Sharepoint Server
Version 2007 sp2
Office Sharepoint Server
Version 2007 sp2
Open Xml File Format Converter
All versions

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (18)

Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
US Government Resource
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.