NVD

Id
48433  
Name
CVE-2009-1136  
Description
The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, and Office Small Business Accounting 2006, when used in Internet Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as exploited in the wild in July and August 2009, aka "Office Web Components HTML Script Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-15  
Modified Date
2010-08-21  
Seq
2009-1136  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
243871 48433 CVE-2009-1136 http://blogs.technet.com/msrc/archive/2009/07/13/microsoft-security-advisory-973472-released.aspx  View
243872 48433 CVE-2009-1136 http://blogs.technet.com/srd/archive/2009/07/13/more-information-about-the-office-web-components-activex-vulnerability.aspx  View
243873 48433 CVE-2009-1136 http://isc.sans.org/diary.html?storyid=6778  View
243874 48433 CVE-2009-1136 oval:org.mitre.oval:def:5809  View
243875 48433 CVE-2009-1136 http://trac.metasploit.com/browser/framework3/trunk/modules/exploits/windows/browser/owc_spreadsheet_msdso.rb  View
243876 48433 CVE-2009-1136 http://www.microsoft.com/technet/security/advisory/973472.mspx  View
243877 48433 CVE-2009-1136 MS09-043  View
243878 48433 CVE-2009-1136 TA09-223A  View
243879 48433 CVE-2009-1136 http://xeye.us/blog/2009/07/one-0day/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40888 JVNDB-2009-001894 Microsoft Office Web コンポーネントのスプレッドシート ActiveX コントロールに脆弱性 Microsoft が提供する Office Web コンポーネントに含まれるスプレッドシート ActiveX コントロールに脆弱性が存在します。 CVE-2009-1136 38567 CVE-2009-1136 48433 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001894.html 2009-07-17 2009-08-18 View