CVE-2009-0558

2009-06-1018:30:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2009-0558

array index error

excel

microsoft office

office 2000

office 2004

office 2008

mac

open xml

memory corruption

vulnerability

nvd

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.947 High

EPSS

Percentile

99.2%

JSON

Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka “Array Indexing Memory Corruption Vulnerability.”

CPENameOperatorVersion
microsoft:open_xml_file_format_convertermicrosoft open xml file format convertereq*
microsoft:officemicrosoft officeeq2008
microsoft:office_excelmicrosoft office exceleq2007
microsoft:office_sharepoint_servermicrosoft office sharepoint servereq2007
microsoft:officemicrosoft officeeq2004
microsoft:officemicrosoft officeeqxp
microsoft:office_excel_viewermicrosoft office excel viewereq*
microsoft:office_compatibility_pack_for_word_excel_ppt_2007microsoft office compatibility pack for word excel ppt 2007eq*
microsoft:office_excel_viewermicrosoft office excel viewereq2003
microsoft:office_excelmicrosoft office exceleq2003

CPE	Name	Operator	Version
microsoft:open_xml_file_format_converter	microsoft open xml file format converter	eq	*
microsoft:office	microsoft office	eq	2008
microsoft:office_excel	microsoft office excel	eq	2007
microsoft:office_sharepoint_server	microsoft office sharepoint server	eq	2007
microsoft:office	microsoft office	eq	2004
microsoft:office	microsoft office	eq	xp
microsoft:office_excel_viewer	microsoft office excel viewer	eq	*
microsoft:office_compatibility_pack_for_word_excel_ppt_2007	microsoft office compatibility pack for word excel ppt 2007	eq	*
microsoft:office_excel_viewer	microsoft office excel viewer	eq	2003
microsoft:office_excel	microsoft office excel	eq	2003