Excel Remote Code Execution Vulnerability in Microsoft Products
CVE-2009-3131

Currently unrated

Key Information:

Vendor
Microsoft
Vendor
CVE Published:
11 November 2009

Summary

This vulnerability in Microsoft Excel allows attackers to exploit a crafted spreadsheet containing malicious formulas. Upon opening the affected file, the attacker can execute arbitrary code on the victim's machine, potentially gaining unauthorized access to sensitive data or executing harmful operations. This risk spans multiple versions of Microsoft Office, emphasizing the need for users and organizations to apply security updates promptly and exercise caution when handling Excel documents from untrusted sources.

References

EPSS Score

56% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.