CVE-2009-1134: Code Injection
Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir (0x806) record object, aka "Record Pointer Corruption Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1134?
CVE-2009-1134 has a critical severity level, allowing remote code execution on affected systems.
How do I fix CVE-2009-1134?
To fix CVE-2009-1134, users should apply the latest patches and updates provided by Microsoft for the affected software.
Which software versions are affected by CVE-2009-1134?
CVE-2009-1134 affects Microsoft Office Excel 2007 SP1 and SP2, Microsoft Office Excel Viewer, and other Microsoft Office files in SP1 and SP2.
Can CVE-2009-1134 be exploited remotely?
Yes, CVE-2009-1134 can be exploited remotely through specially crafted BIFF files.
What kind of attack can CVE-2009-1134 lead to?
CVE-2009-1134 can lead to arbitrary code execution, potentially allowing attackers to gain control of the victim's machine.