CVE-2009-0560: Critical severity Microsoft Open XML File Format Converter vulnerability

Published Jun 10, 2009
·
Updated

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Field Sanitization Memory Corruption Vulnerability."

Affected Software

16 affected components
Microsoft Open XML File Format Converter
Microsoft Office=2008
Microsoft Office Excel=2007-sp2
Microsoft Office SharePoint Server=2007-sp1
Microsoft Office=2004
Microsoft Office=xp-sp3
Microsoft Office Excel Viewer
Microsoft Office Compatibility Pack For Word Excel Ppt 2007=sp1
Microsoft Office Excel Viewer=2003-sp3
Microsoft Office SharePoint Server=2007-sp2
Microsoft Office Compatibility Pack For Word Excel Ppt 2007=sp2
Microsoft Office Excel=2003-sp3
Microsoft Office SharePoint Server=2007-sp1
Microsoft Office Excel=2000-sp3
Microsoft Office SharePoint Server=2007-sp2
Microsoft Office Excel=2007-sp1

Event History

Jun 10, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2009-0560?

CVE-2009-0560 has a medium severity rating and can lead to remote code execution.

2

How do I fix CVE-2009-0560?

To fix CVE-2009-0560, update Microsoft Excel and related applications to the latest security patches.

3

Which software versions are affected by CVE-2009-0560?

CVE-2009-0560 affects various versions of Microsoft Office Excel from 2000 SP3 through 2008 for Mac and other compatible applications.

4

What type of vulnerability is CVE-2009-0560?

CVE-2009-0560 is a vulnerability that can allow an attacker to execute arbitrary code via a crafted spreadsheet.

5

Is CVE-2009-0560 specific to Windows operating systems?

No, CVE-2009-0560 impacts both Windows and Mac versions of Microsoft Excel.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203