Excel Remote Code Execution Vulnerability in Microsoft Products
CVE-2009-3131
Currently unrated
Key Information:
- Vendor
- Microsoft
- Vendor
- CVE Published:
- 11 November 2009
Summary
This vulnerability in Microsoft Excel allows attackers to exploit a crafted spreadsheet containing malicious formulas. Upon opening the affected file, the attacker can execute arbitrary code on the victim's machine, potentially gaining unauthorized access to sensitive data or executing harmful operations. This risk spans multiple versions of Microsoft Office, emphasizing the need for users and organizations to apply security updates promptly and exercise caution when handling Excel documents from untrusted sources.
References
EPSS Score
56% chance of being exploited in the next 30 days.
Timeline
Vulnerability published
Vulnerability Reserved