CVE-2009-0557

CVE-2009-0557 describes an Object Record Corruption vulnerability in Microsoft Office Excel across multiple platforms (Office 2000 SP3, XP SP3, 2003 SP3, Mac editions, and Excel Viewer/Compatibility Pack). The root cause is a malformed record object in an Excel file, enabling remote code executio...

CVE-2009-0238

CVE-2009-0238 corresponds to a remote code execution vulnerability in Microsoft Office Excel and related components (Excel Viewer, Compatibility Pack, and Mac variants) triggered by opening a crafted Excel document that causes an invalid object access. The issue manifests as memory/code execution...

CVE-2009-0561

The CVE-2009-0561 issue is a heap-based buffer overflow in Microsoft Excel triggered while parsing a Shared String Table (SST) record when a numeric field specifies an invalid number of unique strings. Affects multiple Windows/macOS Excel versions across Office 2000–2008 and related viewers/compa...

CVE-2008-4264

CVE-2008-4264 is a remote code execution vulnerability in Microsoft Office Excel (various Windows/macOS Excel versions) caused by pointer corruption while loading Excel formulas from a crafted file. The issue, also described as a File Format Parsing Vulnerability , could allow an attacker to take...

CVE-2009-0100

CVE-2009-0100 affects multiple Microsoft Office Excel variants (Windows and Mac) and is caused by a memory corruption error when parsing Excel records (TXO/OBJ) in the spreadsheet file format. A crafted spreadsheet containing a malformed object with an offset and a two‑byte value can trigger the ...

CVE-2008-3004

The CVE-2008-3004 issue affects Microsoft Office Excel and related Mac/Viewer builds. It arises from improper validation of AxesSet index values when loading Excel files, allowing remote code execution via a specially crafted XLS document. Affected products include Excel 2000 SP3, 2002 SP3, 2003 ...

CVE-2008-3006

Microsoft Excel could allow remote code execution via memory corruption in the BIFF COUNTRY record parsing bug. Affected products include Excel 2000 SP3, 2002 SP3, 2003 SP2/SP3, 2007 Gold/SP1; Excel Viewer; Office Compatibility Pack 2007 Gold/SP1; Office for Mac (2004/2008); and SharePoint Server...

CVE-2009-0558

CVE-2009-0558 is an Array Indexing Memory Corruption Vulnerability in Microsoft Office Excel parsing code that can be triggered by a specially crafted Excel file. It affects Microsoft Office/Excel on Mac (Office 2004 and 2008 for Mac) and the Open XML File Format Converter for Mac, as well as Exc...

CVE-2009-0549

CVE-2009-0549 (Record Pointer Corruption Vulnerability) affects Microsoft Office Excel and related components (Excel Viewer, Office for Mac, Open XML Converter) across multiple versions, enabling remote code execution when a user opens a specially crafted Excel file. The issue is caused by malfor...

CVE-2009-0560

Microsoft Office Excel vulnerability CVE-2009-0560 arises from Field Sanitization Memory Corruption in Excel's parsing of crafted records, enabling remote code execution. Affected products include Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2004/2008 for Mac, Excel 2007 SP1/S...

CVE-2009-1134

CVE-2009-1134 is a memory corruption/remote code execution vulnerability in Microsoft Excel and related components (Excel 2007 SP1/SP2, Excel Viewer, and Office Compatibility Pack SP1/SP2). The flaw occurs while parsing BIFF records, specifically a malformed Qsir (0x806) record, leading to code e...

CVE-2008-4265

CVE-2008-4265 affects Microsoft Office Excel 2000 SP3, where parsing certain TXO/OBJ records can trigger a memory corruption vulnerability that permits remote code execution when a specially crafted Excel file is opened. The root cause is memory corruption during loading of records from the sprea...

CVE-2009-0559

The CVE-2009-0559 entry maps to a set of Excel-related remote code execution vulnerabilities described in MS09-021. The underlying issue is a String Copy Stack-Based Overrun in Excel parsing of malformed records inside Excel files, causing a stack-based buffer overflow that could let an attacker ...