CVE-2009-3129

Microsoft Excel Featheader Record Memory Corruption

7.8 HIGHActively exploited (CISA KEV)Public exploitEPSS 84.0%

Published11 Nov 2009
Added to CISA KEV3 Mar 2022
Remediation due24 Mar 2022

Description

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka "Excel Featheader Record Memory Corruption Vulnerability."

CVSS 3.1 breakdown

Attack vectorLocal

Attack complexityLow

Privileges requiredNone

User interactionRequired

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Microsoft Excel2002 · 2003 · 2007

Microsoft Excel Viewer2003

Microsoft Office2004 · 2008

Microsoft Open Xml File Format Converterall versions

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

Patch & vendor advisories

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067

References

http://archives.neohapsis.com/archives/bugtraq/2009-11/0080.htmlBroken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=832Broken Link
http://osvdb.org/59860Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067PatchVendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6521Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3129US Government Resource
http://www.exploit-db.com/exploits/14706ExploitThird Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/36945Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1023157Broken LinkThird Party AdvisoryVDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-314A.htmlThird Party AdvisoryUS Government Resource

and 1 more references

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2009-3129 being actively exploited?

Yes. CVE-2009-3129 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 3 Mar 2022.

How severe is CVE-2009-3129?

CVE-2009-3129 has a CVSS 3.1 base score of 7.8, rated high. EPSS estimates a 84.0% probability of exploitation.

Which products are affected by CVE-2009-3129?

Affected products include Microsoft Excel, Microsoft Excel Viewer, Microsoft Office, Microsoft Open Xml File Format Converter.

How do I fix CVE-2009-3129?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2009-3129 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo

Running Microsoft 365?

Patching is one half. Scan your domain and check MFA, legacy authentication, admin roles and mail forwarding in two minutes, with a fix for every gap.

Run the free Microsoft 365 check

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.