GCVE - cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*

part: a version: 2007 update: sp2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Office Excel (`d3746934-4613-5856-9984-2bd38c0930e2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-1134`	vulnerable	2026-06-08 04:51:13.164867	Details available Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir (0x806) record object, aka "Record Pointer Corruption Vulnerability." Published: 2009-06-10T18:00:00.000Z Updated: 2024-08-07T05:04:48.015Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/35246 http://www.securityfocus.com/archive/1/504213/100/0/threaded http://www.vupen.com/english/advisories/2009/1540 http://www.securitytracker.com/id?1022351 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0561`	vulnerable	2026-06-08 04:51:09.964446	Details available Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Microsoft Office SharePoint Server 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via an Excel file with a Shared String Table (SST) record with a numeric field that specifies an invalid number of unique strings, which triggers a heap-based buffer overflow, aka "Record Integer Overflow Vulnerability." Published: 2009-06-10T18:00:00.000Z Updated: 2024-08-07T04:40:05.071Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1540 http://secunia.com/secunia_research/2009-12/ http://www.securityfocus.com/archive/1/504190/100/0/threaded http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=805 http://www.securitytracker.com/id?1022351	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0560`	vulnerable	2026-06-08 04:51:09.963709	Details available Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Field Sanitization Memory Corruption Vulnerability." Published: 2009-06-10T18:00:00.000Z Updated: 2024-08-07T04:40:04.108Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1540 http://osvdb.org/54956 http://www.securitytracker.com/id?1022351 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6178	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0559`	vulnerable	2026-06-08 04:51:09.963025	Details available Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "String Copy Stack-Based Overrun Vulnerability." Published: 2009-06-10T18:00:00.000Z Updated: 2024-08-07T04:40:05.044Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1540 http://www.securitytracker.com/id?1022351 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6273 http://www.us-cert.gov/cas/techalerts/TA09-160A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0558`	vulnerable	2026-06-08 04:51:09.962335	Details available Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Array Indexing Memory Corruption Vulnerability." Published: 2009-06-10T18:00:00.000Z Updated: 2024-08-07T04:40:04.026Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1540 http://www.securityfocus.com/archive/1/504188/100/0/threaded http://www.securityfocus.com/bid/35242 http://www.securitytracker.com/id?1022351 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0549`	vulnerable	2026-06-08 04:51:09.919830	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.