cbcvebase.
CVE-2009-3128
published 2009-11-11

CVE-2009-3128: Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to…

critical9.3CVSS 3.1
AVNACMAuNCCICAC
Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka "Excel SxView Memory Corruption Vulnerability."

Affected

7 ranges
VendorProductVersion rangeFixed in
microsoftcompatibility_pack_word_excel_powerpoint
microsoftexcel
microsoftexcel
microsoftexcel
microsoftexcel_viewer
microsoftoffice
microsoftoffice