CVE-2009-3132: Code Injection
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed formula, related to a "pointer corruption" issue, aka "Excel Index Parsing Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3132?
CVE-2009-3132 has a moderate severity level as it allows for potential remote code execution.
How do I fix CVE-2009-3132?
To resolve CVE-2009-3132, users should install the latest security updates for their affected Microsoft Office products.
Which versions of Microsoft Office are affected by CVE-2009-3132?
CVE-2009-3132 affects Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2, along with several versions of Office for Mac and the Excel Viewer.
What type of attack is associated with CVE-2009-3132?
CVE-2009-3132 is associated with remote code execution attacks that exploit vulnerabilities in Microsoft Office Excel.
Is there a patch available for CVE-2009-3132?
Yes, Microsoft has released patches to address CVE-2009-3132 which can be found in the official update channels.