CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-1134

Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir (0x806) record object, aka "Record Pointer Corruption Vulnerability."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.62

EPSS Ranking 98.2%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2009-1134

Microsoft » Office » Version: 2004

cpe:2.3:a:microsoft:office:2004
Microsoft » Office » Version: 2008

cpe:2.3:a:microsoft:office:2008
Microsoft » Office » Version: xp

cpe:2.3:a:microsoft:office:xp
Microsoft » Office Compatibility Pack For Word Excel Ppt 2007 » Version: Any

cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*
Microsoft » Office Excel » Version: 2000

cpe:2.3:a:microsoft:office_excel:2000
Microsoft » Office Excel » Version: 2003

cpe:2.3:a:microsoft:office_excel:2003
Microsoft » Office Excel » Version: 2007

cpe:2.3:a:microsoft:office_excel:2007
Microsoft » Office Excel Viewer » Version: N/A

cpe:2.3:a:microsoft:office_excel_viewer:-
Microsoft » Office Excel Viewer » Version: 2003

cpe:2.3:a:microsoft:office_excel_viewer:2003
Microsoft » Office Sharepoint Server » Version: 2007

cpe:2.3:a:microsoft:office_sharepoint_server:2007
Microsoft » Open Xml File Format Converter » Version: N/A

cpe:2.3:a:microsoft:open_xml_file_format_converter:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-1134

Products

Pricing

Contact Us