9.3

CVE-2009-0560

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Field Sanitization Memory Corruption Vulnerability."

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Office Version2004 Editionmac
Microsoft ≫ Office Version2008 Editionmac
Microsoft ≫ Office Versionxp Updatesp3
Microsoft ≫ Office Excel Version2000 Updatesp3
Microsoft ≫ Office Excel Version2003 Updatesp3
Microsoft ≫ Office Excel Version2007 Updatesp1
Microsoft ≫ Office Excel Version2007 Updatesp2
Microsoft ≫ Office Excel Viewer Version2003 Updatesp3
Microsoft ≫ Office Sharepoint Server Version2007 Updatesp1 Editionx32
Microsoft ≫ Office Sharepoint Server Version2007 Updatesp1 Editionx64
Microsoft ≫ Office Sharepoint Server Version2007 Updatesp2 Editionx32
Microsoft ≫ Office Sharepoint Server Version2007 Updatesp2 Editionx64
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 66.82% 0.984
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C