CVE-2009-1136

The Microsoft Office Web Components Spreadsheet ActiveX control (OWC10 and OWC11) is vulnerable to remote code execution due to an insecure design in certain methods. Attackers can exploit this by enticing a user to open a malicious webpage, leading to the execution of arbitrary code in the secur...

CVE-2009-1533

Buffer overflow in the Microsoft Works File Converter (part of Office/Works Converters) when processing Works (.wps) files can lead to remote code execution. Affected products/versions include Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9. Root ca...