Heap-based Buffer Overflow in Microsoft Office Excel and Open XML File Format Converter

CVE-2009-3130

Summary

This vulnerability is a heap-based buffer overflow found in Microsoft Office Excel (specifically versions 2002 SP3, 2004, and 2008 for Mac) and the Open XML File Format Converter for Mac. Attackers can exploit this vulnerability through specially crafted spreadsheets containing malformed Binary File Format (BIFF) records, leading to memory corruption. Such exploitation can potentially allow remote attackers to execute arbitrary code on affected systems, posing significant risks to user data and system integrity.

References