Memory Corruption Vulnerability in Microsoft Office Excel Products

CVE-2009-3128

Summary

A memory corruption vulnerability exists in Microsoft Office Excel 2002 SP3, Office Excel 2003 SP3, and Office Excel Viewer 2003 SP3. This flaw arises due to improper parsing of the Excel file format, which can be exploited by remote attackers. Specifically, attackers can leverage a specially crafted spreadsheet that contains a malformed record object to execute arbitrary code on the victim's machine when the affected application processes the malicious file. Users are advised to apply available patches and use caution when handling Excel documents from untrusted sources.

References