NVD

Id
47892  
Name
CVE-2009-0561  
Description
Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Microsoft Office SharePoint Server 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via an Excel file with a Shared String Table (SST) record with a numeric field that specifies an invalid number of unique strings, which triggers a heap-based buffer overflow, aka "Record Integer Overflow Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2010-08-21  
Seq
2009-0561  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239967 47892 CVE-2009-0561 20090609 Microsoft Excel SST Record Integer Overflow Vulnerability  View
239968 47892 CVE-2009-0561 oval:org.mitre.oval:def:5925  View
239969 47892 CVE-2009-0561 MS09-021  View
239970 47892 CVE-2009-0561 20090609 Secunia Research: Microsoft Excel String Parsing Integer Overflow Vulnerability  View
239971 47892 CVE-2009-0561 35245  View
239972 47892 CVE-2009-0561 1022351  View
239973 47892 CVE-2009-0561 TA09-160A  View
239974 47892 CVE-2009-0561 ADV-2009-1540  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40788 JVNDB-2009-001794 Microsoft Office Excel における Excel ファイルの処理に関する整数オーバーフローの脆弱性 Microsoft Office Excel には、Excel ファイルの処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2009-0561 37992 CVE-2009-0561 47892 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001794.html 2009-06-09 2009-07-22 View